General

  • Target

    329ae7cf3969dd3026eda9b561397679_JaffaCakes118

  • Size

    831KB

  • MD5

    329ae7cf3969dd3026eda9b561397679

  • SHA1

    b9a27eb8a39936aee5d67e757ae9709373adc883

  • SHA256

    34071cbe302c4425989fc9ea275ad650d6fcec9da3f891a216daae8ac79901eb

  • SHA512

    76ab6eef46b2c6c2718df3d677dd848ad1ca2d2d803ba3a669f2d81146ff80fd8d54c62108defbdb2692d1f835b4d1a843995b54c36c0f8c9c967625de3dc0ef

  • SSDEEP

    24576:7NIzc9lRnMxkdOkY9UoGhzrh9FKwjjoziQV3tr6k:7KA9l6x9kG1IJ9Fzjozi+3Mk

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 329ae7cf3969dd3026eda9b561397679_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/show1.bmp
  • $PLUGINSDIR/show2.bmp
  • ruyitao/3.1.5.4/Extensions/chrome.manifest
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/css/searchbox-patch.css
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/icons/logo-19.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/icons/logo-32.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/btn-bg.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/close-icon-32bit.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/close-icon-8bit.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/close-icon-hover.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/feedback_icon.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/hide-icon.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/loading.gif
    .gif
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/no_image_available.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/option-logo-en.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/option-logo-zh.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/products/author.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/products/compare-disabled.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/products/compare.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/products/etao.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/products/market-item-hover-bg.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/products/market-list-bg.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/arrow-down.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/arrow-down2.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/controller-bg.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/func-icon-hover.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/ju-active.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/ju.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/loading.gif
    .gif
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/logo-hover.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/logo.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/next-page-btn-active.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/next-page-btn-default.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/option-icons.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/option-item-hover.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/plus-active.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/plus.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/prev-page-btn-active.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/prev-page-btn-default.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/product-item-bg.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/product-item-hover-bg.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/amazon.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/amazonca.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/amazoncn.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/amazonde.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/amazonfr.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/amazonit.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/amazonuk.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/coo8.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/dangdang.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/ebay.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/ebayca.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/ebayde.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/ebayfr.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/ebayit.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/ebayuk.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/etao.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/icson.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/jingdong.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/neweggcn.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/taobao.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/walmart.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/se-icons/yihaodian.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/search-active.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/search-bar-bg.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/search-btn-cn.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/search-btn-en.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/search-cn-blue.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/search-cn.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/search-en.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/separator-small.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/teaching-cn.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search/teaching-en.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/search_pic.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/share_to_microblog_btn.gif
    .gif
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/show-icon.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/images/weibo_logo.png
    .png
  • ruyitao/3.1.5.4/Extensions/chrome/content/assets/js/jquery-1.7.1.min.js
    .js
  • ruyitao/3.1.5.4/Extensions/chrome/content/browser.xul
    .xml
  • ruyitao/3.1.5.4/Extensions/chrome/content/main.js
    .js
  • ruyitao/3.1.5.4/Extensions/chrome/content/views/options.html
    .html .js polyglot
  • ruyitao/3.1.5.4/Extensions/chrome/content/views/products.html
  • ruyitao/3.1.5.4/Extensions/chrome/content/views/ruyitao-site.js
  • ruyitao/3.1.5.4/Extensions/chrome/content/views/searchbox.html
  • ruyitao/3.1.5.4/Extensions/chrome/content/views/shoppingassist.js
    .js
  • ruyitao/3.1.5.4/Extensions/install.rdf
    .xml
  • ruyitao/3.1.5.4/Extensions/modules/background.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/browser.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/cache.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/console.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/constants.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/encode.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/factory.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/options.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/search-engine.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/service.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/site.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/sqlite-storage.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/storage.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/upgrader.js
    .js
  • ruyitao/3.1.5.4/Extensions/modules/util.js
    .js
  • ruyitao/3.1.5.4/ShoppingAssistant.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    25e909c5293a1bf8af3caed29e914f8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ruyitao/3.1.5.4/ShoppingAssistant.wsc
    .xml
  • ruyitao/3.1.5.4/all.js
    .js
  • ruyitao/3.1.5.4/logo.ico
  • ruyitao/3.1.5.4/ruyiUpdate.exe
    .exe windows:4 windows x86 arch:x86

    c01350d5e12858bbfc08f74b25d448f6


    Code Sign

    Headers

    Imports

    Sections

  • ruyitao/3.1.5.4/sqlite3.dll
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ruyitao/3.1.5.4/uninst.exe.nsis