General

  • Target

    1b5a424c3c423da001945c6df94584b9_JaffaCakes118

  • Size

    4.7MB

  • MD5

    1b5a424c3c423da001945c6df94584b9

  • SHA1

    662616ba4ba60dbbd0326ab39a16c226e79f02ec

  • SHA256

    8067669a02d58a8ed569b628b1d921d1cbc21895b11061162431c82255804298

  • SHA512

    38ccda3fa2fe6ac08b7d197aee4053d796f3c51ffbaede9fc74630307e9887d90f8320d919cf0d9ad35074c7587344134405ea827e5492eba72438ce031ee63f

  • SSDEEP

    98304:PALNnzCzKmxelSSRzNXwHxKosOHe2lCwMtJz389u6qWlO4/r:PgzmsRAsuR038ULwO4/r

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 1b5a424c3c423da001945c6df94584b9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/12.txt
  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c63d9073f3d78c508912370d272a346e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/io.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExStr.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $SYSDIR/msxml4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c15ed04b7f96417436d03d1ab8b9e327


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msxml4a.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/msxml4r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • KTXIEHelper.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1c10c82eee8fbb1a8b940832b69a405d


    Headers

    Imports

    Exports

    Sections

  • KTXUIU.dll
    .dll windows:4 windows x86 arch:x86

    d7e34a76dd40e03b178832987ba25da2


    Headers

    Imports

    Exports

    Sections

  • LiveUpdate.exe
    .exe windows:4 windows x86 arch:x86

    08d49148df1d877a8fe7a39a512f3f4e


    Headers

    Imports

    Sections

  • LiveUpdate.xml
    .xml
  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • PPReader.exe
    .exe windows:4 windows x86 arch:x86

    1ceafeb71b4019fff3191009ba07be0e


    Headers

    Imports

    Exports

    Sections

  • Pilm/default.xslt
    .xml
  • Pilm/pilmdb
  • Templates/default.xslt
    .xml
  • addlink.htm
    .html .vbs polyglot
  • config/Search.option
    .xml
  • config/plugin.config
    .xml
  • config/system.config
    .xml
  • config/system.option
    .xml
  • database/mimedb.db
  • database/rssdb.db
  • help/firstload.html
    .html
  • help/help.html
    .html
  • help/help.ico
  • help/help/addopml.jpg
    .jpg
  • help/help/addrss.jpg
    .jpg
  • help/help/addrss2.jpg
    .jpg
  • help/help/addrss3.jpg
    .jpg
  • help/help/arrowblueright.gif
    .gif
  • help/help/bg1.gif
    .gif
  • help/help/config_main.jpg
    .jpg
  • help/help/css.css
  • help/help/feedback.jpg
    .jpg
  • help/help/folder.jpg
    .jpg
  • help/help/help2.js
    .js
  • help/help/help_b1.html
    .html
  • help/help/help_b2.html
    .html
  • help/help/help_b3.html
    .html
  • help/help/help_b4.html
    .html
  • help/help/help_b5.html
    .html
  • help/help/help_b6.html
    .html
  • help/help/help_config.html
    .html
  • help/help/image1.jpg
    .jpg
  • help/help/install.jpg
    .jpg
  • help/help/item.gif
    .gif
  • help/help/left.css
  • help/help/managefile.jpg
    .jpg
  • help/help/pic1.jpg
    .jpg
  • help/help/pindao.jpg
    .jpg
  • help/help/property.jpg
    .jpg
  • help/help/question_icon.gif
    .gif
  • help/help/question_icon_hover.gif
    .gif
  • help/help/rec_ico.gif
    .gif
  • help/help/rss2.png
    .png
  • help/help/search.jpg
    .jpg
  • help/help/searchresult.jpg
    .jpg
  • help/help/shownew.jpg
    .jpg
  • help/help/task.jpg
    .jpg
  • help/help/tianxia.gif
    .gif
  • help/help/toopml.jpg
    .jpg
  • help/help/tu1.gif
    .gif
  • help/help/tu2.gif
    .gif
  • help/help/uninstall.jpg
    .jpg
  • help/help/uninstall2.jpg
    .jpg
  • help/help/whats'new.html
    .html
  • help/help/widget_minus.gif
    .gif
  • help/help/widget_minus_hvr.gif
    .gif
  • help/help/widget_plus.gif
    .gif
  • help/help/widget_plus_hvr.gif
    .gif
  • help/help/xml.gif
    .gif
  • help/left.html
    .html
  • help/top.html
    .html
  • idnconv.dll
    .dll windows:4 windows x86 arch:x86

    7e41369cc90935168513a5d0804b96d3


    Headers

    Imports

    Exports

    Sections

  • ktxdb.dll
    .dll windows:4 windows x86 arch:x86

    a057171d2408cf8afe52902c16814389


    Headers

    Imports

    Exports

    Sections

  • mfc71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pilmlib.dll
    .dll windows:4 windows x86 arch:x86

    d7a62a8ed552bef25af6fd4a49e29896


    Headers

    Imports

    Exports

    Sections

  • plugin/SendItemDataPlugin.dll
    .dll windows:4 windows x86 arch:x86

    c5d006e2a2d80f6904b52e0eb4b4b09b


    Headers

    Imports

    Exports

    Sections

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections