General

  • Target

    1b872fc070cd21a5bd430ef287058c13_JaffaCakes118

  • Size

    3.0MB

  • MD5

    1b872fc070cd21a5bd430ef287058c13

  • SHA1

    5ba9cba17bfad2b2143b921e788c6743caef4610

  • SHA256

    96b0c5213671485ca5ad9d9a8abffaf2a91c08c39c250ad2bbf5662a5835fed8

  • SHA512

    1826ca9d32c97f4621145fb5581a8f34e481cda98fd1df1f1655bd7ffe7c9204a947e97a445795f11b1062459f873c91ede108a60ed10113fa3a84747ad31dd4

  • SSDEEP

    49152:6JJH5WqA3wQRX1hUTDEa8fU2wabaB7ADYaUhatFwpG2IAfFi/h2TdbOK6M/d9Ov/:CH5LSN0P7qpy7S4hSFwprf5TL6adxJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 1b872fc070cd21a5bd430ef287058c13_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Ad.exe
    .exe windows:4 windows x86 arch:x86

    a5e1c2ec7a61ae37e9ca2f404e3cafbc


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/DownloadProxyPS.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b177dcb186702f9a4775e053e2fa1e17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/QQVipDownloader.exe
    .exe windows:4 windows x86 arch:x86

    7918cba16aace48fd77047e0c1514897


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/SSOCommon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    10a44f4ccbe1052177c8f4aa4c77e081


    Headers

    Imports

    Exports

    Sections

  • $_2_/SSOLUIControl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7b72b308cecb50c7252934bd54b1513a


    Headers

    Imports

    Exports

    Sections

  • $_2_/SSOPlatform.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f3ad42b23a5744ca18c481ea97869a09


    Headers

    Imports

    Exports

    Sections

  • $_2_/Skin/SkinConfig.ini
  • $_2_/Skin/bk.png
    .png
  • $_2_/Skin/btn_pause_task.png
    .png
  • $_2_/Skin/btn_resume_task.png
    .png
  • $_2_/Skin/btn_retry_task.png
    .png
  • $_2_/Skin/btn_setup.png
    .png
  • $_2_/Skin/btn_start_task.png
    .png
  • $_2_/Skin/btn_topspeed.png
    .png
  • $_2_/Skin/close.png
    .png
  • $_2_/Skin/dlg_bk.png
    .png
  • $_2_/Skin/dlg_bk_about.png
    .png
  • $_2_/Skin/dlg_bk_login.png
    .png
  • $_2_/Skin/dlg_btn.png
    .png
  • $_2_/Skin/dlg_checkbox_off.png
    .png
  • $_2_/Skin/dlg_checkbox_on.png
    .png
  • $_2_/Skin/dlg_close.png
    .png
  • $_2_/Skin/dlg_input.png
    .png
  • $_2_/Skin/dlg_open_vip.png
    .png
  • $_2_/Skin/file_path_input.png
    .png
  • $_2_/Skin/icon_path.png
    .png
  • $_2_/Skin/icon_success.png
    .png
  • $_2_/Skin/list_bk.png
    .png
  • $_2_/Skin/menu_bk.png
    .png
  • $_2_/Skin/menu_hilight.png
    .png
  • $_2_/Skin/menu_seperator.png
    .png
  • $_2_/Skin/min.png
    .png
  • $_2_/Skin/progress_bk.png
    .png
  • $_2_/Skin/progress_fg.png
    .png
  • $_2_/Skin/setting.png
    .png
  • $_2_/Skin/tips_bk.png
    .png
  • $_2_/Skin/tips_game_acc.png
    .png
  • $_2_/Skin/tips_vip.png
    .png
  • $_2_/Skin/vip_off.png
    .png
  • $_2_/Skin/vip_on.png
    .png
  • $_2_/Skin/vipdl.ico
  • $_2_/SkinConfig.ini
  • $_2_/Tencentdl.exe
    .exe windows:4 windows x86 arch:x86

    c78de639ebfb6a7ebee511db083ddf87


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/VerConfig.ini
  • $_2_/bugreport.exe
    .exe windows:4 windows x86 arch:x86

    4b9f98c3cc39d350cf2d92c792f53ef4


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/config.ini
  • $_2_/curllib.dll
    .dll windows:4 windows x86 arch:x86

    e7e76bacda92f81d0eefd0a58978a370


    Headers

    Imports

    Exports

    Sections

  • $_2_/dlcore.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e11ed6aac5b5fba95048af2d6ffbe89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/extract.dll
    .dll windows:4 windows x86 arch:x86

    102033a12b8cf17a451a9e9760020138


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/tinyxml.dll
    .dll windows:4 windows x86 arch:x86

    2524407d3051eac98e4560fe35989f1a


    Headers

    Imports

    Exports

    Sections

  • $_2_/tnproxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2c6a8580aa373b4c5d85aca34b95e660


    Code Sign

    Headers

    Imports

    Exports

    Sections