General

  • Target

    37643568ecba4ec7540e58163222b61e_JaffaCakes118

  • Size

    12.1MB

  • MD5

    37643568ecba4ec7540e58163222b61e

  • SHA1

    a6c03f3a809071ad074e6292b52effed67d30248

  • SHA256

    03ba7ea3ecfb6bd317098ba4b6a7a4fea52253f0318f2f51b2a54c4af5679b24

  • SHA512

    f81cbd9b15f707a40f454da13ab5de8516fa702feb69469aa242a7f895de75ceff6955acff2c50db5315ebcefe7c5e9061ba9d3d7535ff0eb0dca234a7e99da0

  • SSDEEP

    393216:9LTo8e3PqbBD5GPebcRNnPdO4PJBZhlVBkA3na2W:948WIM4crl5bZLVBrBW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 79 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 37643568ecba4ec7540e58163222b61e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • ACodec.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f23926a33acf33f73d4fed9711241739


    Headers

    Imports

    Exports

    Sections

  • AudioDevice.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    984135d2577dc139761471034caaff3e


    Headers

    Imports

    Exports

    Sections

  • BQQApplication.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f1a73056ee0b624d62524ea1c160f617


    Headers

    Imports

    Exports

    Sections

  • BasicCtrlDll.dll
    .dll windows:4 windows x86 arch:x86

    accf16fbcdb2f5b80cf4abb7c38dc267


    Headers

    Imports

    Exports

    Sections

  • CPHelper.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa87e70726c353d40d8c696ad78bd572


    Headers

    Imports

    Exports

    Sections

  • CQQApplication.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b6304350c1e941a9a1177959d6000aa0


    Headers

    Imports

    Exports

    Sections

  • CQQCfg.exe
    .exe windows:4 windows x86 arch:x86

    f573deccd28849de99a34b38c86cff6e


    Headers

    Imports

    Sections

  • CameraDll.dll
    .dll windows:4 windows x86 arch:x86

    f0934fa80690c35d5e71c20fb00e2970


    Headers

    Imports

    Exports

    Sections

  • Config.db
  • CoralQQ.dll
    .dll windows:4 windows x86 arch:x86

    26d675b52a860c41b1420d0f5ccd5d11


    Headers

    Imports

    Exports

    Sections

  • CoralQQ.exe
    .exe windows:4 windows x86 arch:x86

    19856e6e5de43641bb2faee7a31c0748


    Headers

    Imports

    Sections

  • CoralQQ.ini
  • CoralQQLite.dll
    .dll windows:4 windows x86 arch:x86

    bd4119fe5f08d924c42bc0cc14586a38


    Headers

    Imports

    Exports

    Sections

  • DShared.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fa39ac3bb7a426051ebf7ef1498b1442


    Headers

    Imports

    Exports

    Sections

  • GIPSVoiceEngineDLL.dll
    .dll windows:4 windows x86 arch:x86

    e04778acc7aaf12a0724959d77e2e384


    Headers

    Imports

    Exports

    Sections

  • GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    7d265bc0350ed04fb2dffec878eb283e


    Headers

    Imports

    Exports

    Sections

  • GmData.txt
  • GmDataAllinone.txt
  • GroupConnection.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2c4282db59e6138c4527909c9a1d7d42


    Headers

    Imports

    Exports

    Sections

  • HostingMgr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c7019562a4f7c15ef3ac292e7df2b6e9


    Headers

    Imports

    Exports

    Sections

  • HttpDownload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d4da73a1fa4787e6bfee3d67b40fee23


    Headers

    Imports

    Exports

    Sections

  • ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    44660346896afa7fcf9a9e309322676b


    Headers

    Imports

    Exports

    Sections

  • ImagePro.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1500a5c72b8f0095ffd6cb4804ea298f


    Headers

    Imports

    Exports

    Sections

  • InPlus.dll
    .dll windows:4 windows x86 arch:x86

    6faee7b61cdb0089836515f87fd7e8ee


    Headers

    Imports

    Exports

    Sections

  • LoginCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    294f5c09aeed10186ee39eafc4da857e


    Headers

    Imports

    Exports

    Sections

  • LongConnection.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7bd5930ac2cd9c0f4d2638d4960107d4


    Headers

    Imports

    Exports

    Sections

  • Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • NewSkin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b850751c96e804535c2bc49e5a4b5a9d


    Headers

    Imports

    Exports

    Sections

  • PersonalDesktop.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f00ed0d12a7d3339d2e6ea73516de27b


    Headers

    Imports

    Exports

    Sections

  • PersonalTalk.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    84ef288b4ad457b07474d784bb22cd28


    Headers

    Imports

    Exports

    Sections

  • QImage.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    22d00539d0c8b9b498014956d7b95731


    Headers

    Imports

    Exports

    Sections

  • QQ.exe
    .exe windows:4 windows x86 arch:x86

    6cbe8423768a6e7c979df04294ac12f2


    Headers

    Imports

    Exports

    Sections

  • QQAPI.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3b59d50f1bcabd0e0d36d750bbbce52c


    Headers

    Imports

    Exports

    Sections

  • QQAllInOne.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    debac3aee1b59b9a007642f6ae40f27a


    Headers

    Imports

    Exports

    Sections

  • QQAvatar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    777700b3aa63f817749e0366315eae83


    Headers

    Imports

    Exports

    Sections

  • QQBaseClassInDll.dll
    .dll windows:4 windows x86 arch:x86

    3f1f998a844cb8688d97acaf6a242438


    Headers

    Imports

    Exports

    Sections

  • QQConfigPlugin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    435079276d5938e5240151ffec56483a


    Headers

    Imports

    Exports

    Sections

  • QQCustomFace.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    56952f5926833d5f1090ca7aba3fb2cb


    Headers

    Imports

    Exports

    Sections

  • QQDiskShellMenu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    403554edd7cb6f36ba8ab1802faaf91e


    Headers

    Imports

    Exports

    Sections

  • QQFileTransfer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b20be34f5cd9bd628124f10b929ee69


    Headers

    Imports

    Exports

    Sections

  • QQGroupDisk.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    97b81bd1f91075a3a3b577104c279b2d


    Headers

    Imports

    Exports

    Sections

  • QQGroupMng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f33e560ef131b7ebdfcb33ff57f047ef


    Headers

    Imports

    Exports

    Sections

  • QQHelperDll.dll
    .dll windows:4 windows x86 arch:x86

    fad51b80296fbfb15775422d4e5d905f


    Headers

    Imports

    Exports

    Sections

  • QQHook.dll
    .dll windows:4 windows x86 arch:x86

    c52e7ffb5177afd2462d516e53bcba6a


    Headers

    Imports

    Exports

    Sections

  • QQMMSender.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0d799067485a4f770d12dc53f67f2b87


    Headers

    Imports

    Exports

    Sections

  • QQMagicFace.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    13c8e27d2491df58bb560a8634efe0ad


    Headers

    Imports

    Exports

    Sections

  • QQMainFrame.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    feedb6998fd86eef3055e76ccd44770f


    Headers

    Imports

    Exports

    Sections

  • QQMsgFriendMng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f6696598c9fc6a96717a76bec780974


    Headers

    Imports

    Exports

    Sections

  • QQNetDisk.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bc1f3ab779b45154cde8fbcca306083c


    Headers

    Imports

    Exports

    Sections

  • QQOneClick.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    79354f6b09f2370717dc60c8a611b833


    Headers

    Imports

    Exports

    Sections

  • QQPIMNetFav.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1e4031067d4fa1c48abaf66c61d8c02b


    Headers

    Imports

    Exports

    Sections

  • QQPlugin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b7e34f3567bc64505821d82be10f0326


    Headers

    Imports

    Exports

    Sections

  • QQRes.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQSceneMng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a5e4414963a5b72800bb143fa80d9ed6


    Headers

    Imports

    Exports

    Sections

  • QQSettingCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7514bda7b81f2828b2bed0b6b1a3bc6b


    Headers

    Imports

    Exports

    Sections

  • QQSysMsgMng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    18c350dabecada0dd1ce3f10c3e57e9c


    Headers

    Imports

    Exports

    Sections

  • QQUdpGetFileLib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0f5b3bf52848647f25e50557b09d4e01


    Headers

    Imports

    Exports

    Sections

  • QQZip.dll
    .dll windows:4 windows x86 arch:x86

    35a4e448519885de9ba51b1e60d4a172


    Headers

    Imports

    Exports

    Sections

  • QRingMng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4754d1ef13d0d78556c3e67b46315b88


    Headers

    Imports

    Exports

    Sections

  • Riched32.dll
    .dll windows:5 windows x86 arch:x86

    a7a197727231042d22b24fc8d3f916fb


    Headers

    Imports

    Sections

  • SCCore.dll
    .dll windows:4 windows x86 arch:x86

    f9725a4518e79729d5b59195c8474d83


    Headers

    Imports

    Exports

    Sections

  • ToLeft.bmp
  • UserDefinedHead.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8b1125d3e901f022db6c80240032673c


    Headers

    Imports

    Exports

    Sections

  • VCodec.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    159287549f857500eccfa0afaf18dbfe


    Headers

    Imports

    Exports

    Sections

  • VQQMPlayer.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    d09ee176d6821ebe1c2a901620097c9a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Version.ini
  • VideoDevice.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    81f5f91793ca04eb45976e8392a3d5fe


    Headers

    Imports

    Exports

    Sections

  • VqqAllInOne.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    765b42fb81d7f6d0cc90a5fcebb6831c


    Headers

    Imports

    Exports

    Sections

  • VqqDownload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    de725e7a82c84cd74823d7b9e80e053a


    Headers

    Imports

    Exports

    Sections

  • WizardCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1ec2536c9dd77cc7af205fe729d3ffb9


    Headers

    Imports

    Exports

    Sections

  • audioengine.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6689c9adf4ee907d7258d63ac1733123


    Headers

    Imports

    Exports

    Sections

  • bo.gif
    .gif
  • bullet2.gif
    .gif
  • button_arrow_down.bmp
  • button_arrow_normal.bmp
  • button_attach_down.bmp
  • button_attach_normal.bmp
  • button_default.bmp
  • button_down.bmp
  • button_normal.bmp
  • button_over.bmp
  • checkmenu.bmp
  • contact_base.bmp
  • cqchat.dll
    .dll windows:4 windows x86 arch:x86

    5762cecbc0867854b8a6afb61833d965


    Headers

    Imports

    Exports

    Sections

  • effect.ini
  • effect_01Down_I.txt
    .js
  • effect_01Down_II.txt
    .js
  • effect_ColorBallFly.txt
    .js
  • effect_ColorRing.txt
    .js
  • effect_CoolClock.txt
    .js
  • effect_CoolShadeText.txt
    .js
  • effect_PaoPao.txt
    .js
  • effect_PointLight.txt
  • effect_PointLightPicture.txt
    .js
  • effect_RadarPicture.txt
    .js
  • effect_RainScene.txt
    .js
  • effect_RunStopText.txt
    .js
  • effect_ShadeText.txt
    .js
  • effect_ShadowText.txt
    .js
  • effect_SnowScene.txt
    .js
  • effect_SnowScene_white.txt
    .js
  • effect_SpringBall.txt
    .js
  • effect_StarSky.txt
    .js
  • effect_Typer.txt
    .js
  • effect_UFO.txt
    .js
  • effect_WaterWave.txt
    .js
  • effect_WaveText.txt
    .js
  • exstatcount.dat
  • frame_border_bottom_left.bmp
  • frame_border_bottom_mid.bmp
  • frame_border_bottom_right.bmp
  • frame_border_left.bmp
  • frame_border_right.bmp
  • frame_closeBox.bmp
  • frame_maxBox.bmp
  • frame_minbox.bmp
  • frame_restoreBox.bmp
  • frame_title_left.bmp
  • frame_title_mid.bmp
  • frame_title_right.bmp
  • frame_title_right_dialog.bmp
  • iphelper.exe
    .exe windows:4 windows x86 arch:x86

    b4181845f4f279dc010360cb544e06df


    Headers

    Imports

    Sections

  • iphelper.exe.sig
  • ipsearcher.dll
    .dll windows:4 windows x86 arch:x86

    7324a3ff48e67ebeb56a428bed10792d


    Headers

    Imports

    Exports

    Sections

  • ipsearcher.dll.sig
  • ipwry.dat
  • license.txt
  • main_toolbar_bk.bmp
  • main_toolbar_button_bk_down.bmp
  • main_toolbar_button_bk_dropdown.bmp
  • main_toolbar_button_bk_normal.bmp
  • main_toolbar_button_bk_over.bmp
  • menu_back.bmp
  • netfavorite_headerctrl_bk.bmp
  • netfavorite_main_mailbox_title_mid.bmp
  • netfavorite_main_maillist_title_bk.bmp
  • pao.gif
  • qdshm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3685cfc2ea88141c54ffc8f3781b5f69


    Headers

    Imports

    Exports

    Sections

  • qqldrfmt.dll
    .dll windows:4 windows x86 arch:x86

    f777ed96f9b8b5a62f7aa07dc7e42de4


    Headers

    Imports

    Exports

    Sections

  • qqmail_headerctrl_bk.bmp
  • qqmail_imagelist_addressframe_listview.bmp
  • qqmail_imagelist_addressframe_menu.bmp
  • qqmail_imagelist_addressframe_menu_disable.bmp
  • qqmail_imagelist_addressframe_toolbar_disable.bmp
  • qqmail_imagelist_addressframe_toolbar_normal.bmp
  • qqmail_imagelist_addressframe_toolbar_over.bmp
  • qqmail_imagelist_addressframe_toolbar_small.bmp
  • qqmail_imagelist_addressframe_treeview.bmp
  • qqmail_imagelist_main_header.bmp
  • qqmail_imagelist_main_listview.bmp
  • qqmail_imagelist_main_listview_menu.bmp
  • qqmail_imagelist_main_menu.bmp
  • qqmail_imagelist_main_toolbar_disable.bmp
  • qqmail_imagelist_main_toolbar_normal.bmp
  • qqmail_imagelist_main_toolbar_normal_small.bmp
  • qqmail_imagelist_main_toolbar_over.bmp
  • qqmail_imagelist_mainframe_treeview.bmp
  • qqmail_imagelist_readframe_menu.bmp
  • qqmail_imagelist_readframe_toolbar_disable.bmp
  • qqmail_imagelist_readframe_toolbar_normal.bmp
  • qqmail_imagelist_readframe_toolbar_over.bmp
  • qqmail_imagelist_readframe_toolbar_small.bmp
  • qqmail_imagelist_remoteframe_header.bmp
  • qqmail_imagelist_remoteframe_listview.bmp
  • qqmail_imagelist_remoteframe_menu.bmp
  • qqmail_imagelist_remoteframe_menu_disable.bmp
  • qqmail_imagelist_remoteframe_toolbar_disable.bmp
  • qqmail_imagelist_remoteframe_toolbar_normal.bmp
  • qqmail_imagelist_remoteframe_toolbar_over.bmp
  • qqmail_imagelist_remoteframe_toolbar_small.bmp
  • qqmail_imagelist_remoteframe_treeview.bmp
  • qqmail_imagelist_writeframe_htmlview_menu.bmp
  • qqmail_imagelist_writeframe_htmlview_menu_disable.bmp
  • qqmail_imagelist_writeframe_menu.bmp
  • qqmail_imagelist_writeframe_menu_disable.bmp
  • qqmail_imagelist_writeframe_toolbar_disable.bmp
  • qqmail_imagelist_writeframe_toolbar_normal.bmp
  • qqmail_imagelist_writeframe_toolbar_over.bmp
  • qqmail_imagelist_writeframe_toolbar_small.bmp
  • qqmail_main_mailbox_title_left.bmp
  • qqmail_main_mailbox_title_mid.bmp
  • qqmail_main_mailbox_title_right.bmp
  • qqmail_main_maillist_title_bk.bmp
  • qqmail_main_preview_title_bk.bmp
  • qqmail_notify_header_bk.bmp
  • qqmail_optiondlg_button_down.bmp
  • qqmail_optiondlg_button_normal.bmp
  • qqmail_optiondlg_button_over.bmp
  • qqmail_optiondlg_item_normal.bmp
  • qqmail_optiondlg_item_over.bmp
  • qqmail_optiondlg_title_bk.bmp
  • qqmail_writeframe_htmltoolbar_bk.bmp
  • qqmail_writeframe_htmltoolbar_disable.bmp
  • qqmail_writeframe_htmltoolbar_normal.bmp
  • qqmse.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • readme.txt
  • riched20.dll
    .dll windows:5 windows x86 arch:x86

    b273fadc4482676e5c978e88480e0b9e


    Headers

    Imports

    Exports

    Sections

  • setup_aspeedercb.exe
    .exe windows:5 windows x86 arch:x86

    c56a25fa4336eeb10723b3537ba4876d


    Headers

    Imports

    Sections

  • skins.ini
  • snow.gif
    .gif
  • splitter_bk_4.bmp
  • statusbar_bk.bmp
  • statusbar_corner.bmp
  • tabctrl_Normal.bmp
  • tabctrl_Select.bmp
  • tencent-comlib.dll
    .dll windows:4 windows x86 arch:x86

    1b4ad755dec7a51a263e47a73c4a3e19


    Headers

    Imports

    Sections

  • tencent-proto1.dll
    .dll windows:4 windows x86 arch:x86

    7b08cdbf5a8b5908c7c033844bc3e42b


    Headers

    Imports

    Exports

    Sections

  • tencent-proto2.dll
    .dll windows:4 windows x86 arch:x86

    4ac6be661ec299b05674fcc53970b99f


    Headers

    Imports

    Sections

  • title_bg.bmp
  • toBottom.bmp
  • toRight.bmp
  • toTop.bmp
  • toolbar_arrow.bmp
  • vbscript.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bf110ce7db6661c4be3fb054895662d7


    Headers

    Imports

    Exports

    Sections

  • vphone.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    689603a95279bb97e6a37c6b2cc4f1de


    Headers

    Imports

    Exports

    Sections

  • vqqset.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    eb4d5eae322c9b8cbf0cd3ab20b878d8


    Headers

    Imports

    Exports

    Sections

  • ԼʼЧ.doc
    .doc windows office2003