General

  • Target

    38e936c60db6bb7623c283239b5af185_JaffaCakes118

  • Size

    2.0MB

  • MD5

    38e936c60db6bb7623c283239b5af185

  • SHA1

    fecf724ba9a318be3f59a920c9c7b1416849b83e

  • SHA256

    6a871eea6f2c9e9870d3ff4fd96a656ab6d67111b795bb8debccedabc8963f53

  • SHA512

    deffbc259342ed6a9f96e996cec9ea4cb236c4f2fe654fb9e021b38b196b7be43f256f68a3c28e580d10daad481e2bd61501232d0ccb037e7d55a899bf043c0c

  • SSDEEP

    49152:8FeomFwKgfXkJTVbeDSJuokW+MwI9oYC2X9BOrqo18:TwKqkJJ6uJPkWt9tQm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 38e936c60db6bb7623c283239b5af185_JaffaCakes118
    .rar
  • QDownload/GetUrl.htm
    .html .js polyglot
  • QDownload/MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • QDownload/ParseKernel.dll
    .dll windows:4 windows x86 arch:x86

    f7c4e71751dc7fedcc4d1db9d6e54a65


    Headers

    Imports

    Sections

  • QDownload/ParseQDLink.exe
    .exe windows:4 windows x86 arch:x86

    3e123a064a31665ca3eea14501ecf239


    Headers

    Imports

    Sections

  • QDownload/ParseQLink.dll
    .dll windows:4 windows x86 arch:x86

    f7c4e71751dc7fedcc4d1db9d6e54a65


    Headers

    Imports

    Sections

  • QDownload/QDIEMenu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    dee6c1a6eecf398c87189454c95595fd


    Headers

    Imports

    Exports

    Sections

  • QDownload/QDown.exe
    .exe windows:4 windows x86 arch:x86

    ed6f3d484e2d6a57b3a211a710f26490


    Headers

    Imports

    Sections

  • QDownload/QDownload.exe
    .exe windows:4 windows x86 arch:x86

    2bd841dfd6cdc76659afd27ee376a87c


    Headers

    Imports

    Sections

  • QDownload/RecommedList.xml
    .xml
  • QDownload/SearchList.xml
    .xml
  • QDownload/SkinList.xml
    .xml
  • QDownload/Skins/Black/PQDL_Skin_Profile.ini
  • QDownload/Skins/Black/Skin_Profile.ini
  • QDownload/Skins/Black/Thumbs.db
  • QDownload/Skins/Black/batch_down.bmp
  • QDownload/Skins/Black/bottom.bmp
  • QDownload/Skins/Black/btn_radio.bmp
  • QDownload/Skins/Black/btn_shutdown.bmp
  • QDownload/Skins/Black/btn_shutdown_plan.bmp
  • QDownload/Skins/Black/btn_skin.bmp
  • QDownload/Skins/Black/close.bmp
  • QDownload/Skins/Black/delete.bmp
  • QDownload/Skins/Black/dialog_back.bmp
  • QDownload/Skins/Black/dialog_button_back.bmp
  • QDownload/Skins/Black/dialog_checkbox.bmp
  • QDownload/Skins/Black/dialog_close.bmp
  • QDownload/Skins/Black/dialog_combo_btn.bmp
  • QDownload/Skins/Black/directory.bmp
  • QDownload/Skins/Black/down_wnd_splitter_vert_back.bmp
  • QDownload/Skins/Black/downlist_status.bmp
  • QDownload/Skins/Black/download_control_panel_bk.bmp
  • QDownload/Skins/Black/download_task.bmp
  • QDownload/Skins/Black/download_wnd_back.bmp
  • QDownload/Skins/Black/finish_task.bmp
  • QDownload/Skins/Black/flow_Task_progress.bmp
  • QDownload/Skins/Black/flow_wnd_bk.bmp
  • QDownload/Skins/Black/label_list_icon.bmp
  • QDownload/Skins/Black/list_folder_hot.bmp
  • QDownload/Skins/Black/list_icons.bmp
  • QDownload/Skins/Black/listctrl_head_back.bmp
  • QDownload/Skins/Black/listctrl_head_line.bmp
  • QDownload/Skins/Black/listctrl_progress.bmp
  • QDownload/Skins/Black/max.bmp
  • QDownload/Skins/Black/menu.bmp
  • QDownload/Skins/Black/menu_icons.bmp
  • QDownload/Skins/Black/menuwnd_back.bmp
  • QDownload/Skins/Black/middle.bmp
  • QDownload/Skins/Black/min.bmp
  • QDownload/Skins/Black/new_task.bmp
  • QDownload/Skins/Black/normal.bmp
  • QDownload/Skins/Black/option.bmp
  • QDownload/Skins/Black/parse_wnd_back.bmp
  • QDownload/Skins/Black/parse_wnd_back_done.bmp
  • QDownload/Skins/Black/parse_wnd_back_error.bmp
  • QDownload/Skins/Black/pause.bmp
  • QDownload/Skins/Black/plan_dlg_middle.bmp
  • QDownload/Skins/Black/plan_dlg_top.bmp
  • QDownload/Skins/Black/play.bmp
  • QDownload/Skins/Black/pqdl_bottom.bmp
  • QDownload/Skins/Black/pqdl_close.bmp
  • QDownload/Skins/Black/pqdl_max.bmp
  • QDownload/Skins/Black/pqdl_min.bmp
  • QDownload/Skins/Black/pqdl_normal.bmp
  • QDownload/Skins/Black/pqdl_top.bmp
  • QDownload/Skins/Black/radio.bmp
  • QDownload/Skins/Black/ranklist_search.bmp
  • QDownload/Skins/Black/rubbish_task.bmp
  • QDownload/Skins/Black/search_button.bmp
  • QDownload/Skins/Black/search_wnd_back.bmp
  • QDownload/Skins/Black/search_wnd_back_panel.bmp
  • QDownload/Skins/Black/search_wnd_button.bmp
  • QDownload/Skins/Black/search_wnd_splitter_vert_back.bmp
  • QDownload/Skins/Black/searchbox_back.bmp
  • QDownload/Skins/Black/searchresultlist_btn.bmp
  • QDownload/Skins/Black/seperate.bmp
  • QDownload/Skins/Black/spin.bmp
  • QDownload/Skins/Black/splitter.bmp
  • QDownload/Skins/Black/start.bmp
  • QDownload/Skins/Black/tab_ad.bmp
  • QDownload/Skins/Black/tab_download.bmp
  • QDownload/Skins/Black/tab_films.bmp
  • QDownload/Skins/Black/tab_parse.bmp
  • QDownload/Skins/Black/tab_search.bmp
  • QDownload/Skins/Black/tab_unescape.bmp
  • QDownload/Skins/Black/top.bmp
  • QDownload/Skins/Black/unescape_wnd_back.bmp
  • QDownload/Skins/Black/videolist_check.bmp
  • QDownload/Skins/Black/videolist_icon.bmp
  • QDownload/Skins/Black/vl.bmp
  • QDownload/Skins/Black/vl_cancle_select_all_button.bmp
  • QDownload/Skins/Black/vl_down_button.bmp
  • QDownload/Skins/Black/vl_select_all_button.bmp
  • QDownload/Skins/Default/PQDL_Skin_Profile.ini
  • QDownload/Skins/Default/Skin_Profile.ini
  • QDownload/Skins/Default/Thumbs.db
  • QDownload/Skins/Default/batch_down.bmp
  • QDownload/Skins/Default/bottom.bmp
  • QDownload/Skins/Default/btn_radio.bmp
  • QDownload/Skins/Default/btn_shutdown.bmp
  • QDownload/Skins/Default/btn_shutdown_plan.bmp
  • QDownload/Skins/Default/btn_skin.bmp
  • QDownload/Skins/Default/close.bmp
  • QDownload/Skins/Default/delete.bmp
  • QDownload/Skins/Default/dialog_back.bmp
  • QDownload/Skins/Default/dialog_button_back.bmp
  • QDownload/Skins/Default/dialog_checkbox.bmp
  • QDownload/Skins/Default/dialog_close.bmp
  • QDownload/Skins/Default/dialog_combo_btn.bmp
  • QDownload/Skins/Default/directory.bmp
  • QDownload/Skins/Default/down_wnd_splitter_vert_back.bmp
  • QDownload/Skins/Default/downlist_status.bmp
  • QDownload/Skins/Default/download_control_panel_bk.bmp
  • QDownload/Skins/Default/download_task.bmp
  • QDownload/Skins/Default/download_wnd_back.bmp
  • QDownload/Skins/Default/finish_task.bmp
  • QDownload/Skins/Default/flow_Task_progress.bmp
  • QDownload/Skins/Default/flow_wnd_bk.bmp
  • QDownload/Skins/Default/label_list_icon.bmp
  • QDownload/Skins/Default/list_folder_hot.bmp
  • QDownload/Skins/Default/list_icons.bmp
  • QDownload/Skins/Default/listctrl_head_back.bmp
  • QDownload/Skins/Default/listctrl_head_line.bmp
  • QDownload/Skins/Default/listctrl_progress.bmp
  • QDownload/Skins/Default/max.bmp
  • QDownload/Skins/Default/menu.bmp
  • QDownload/Skins/Default/menu_icons.bmp
  • QDownload/Skins/Default/menuwnd_back.bmp
  • QDownload/Skins/Default/middle.bmp
  • QDownload/Skins/Default/min.bmp
  • QDownload/Skins/Default/new_task.bmp
  • QDownload/Skins/Default/normal.bmp
  • QDownload/Skins/Default/option.bmp
  • QDownload/Skins/Default/parse_wnd_back.bmp
  • QDownload/Skins/Default/parse_wnd_back_done.bmp
  • QDownload/Skins/Default/parse_wnd_back_error.bmp
  • QDownload/Skins/Default/pause.bmp
  • QDownload/Skins/Default/plan_dlg_middle.bmp
  • QDownload/Skins/Default/plan_dlg_top.bmp
  • QDownload/Skins/Default/play.bmp
  • QDownload/Skins/Default/pqdl_bottom.bmp
  • QDownload/Skins/Default/pqdl_top.bmp
  • QDownload/Skins/Default/radio.bmp
  • QDownload/Skins/Default/ranklist_search.bmp
  • QDownload/Skins/Default/rubbish_task.bmp
  • QDownload/Skins/Default/search_button.bmp
  • QDownload/Skins/Default/search_wnd_back.bmp
  • QDownload/Skins/Default/search_wnd_back_panel.bmp
  • QDownload/Skins/Default/search_wnd_button.bmp
  • QDownload/Skins/Default/search_wnd_splitter_vert_back.bmp
  • QDownload/Skins/Default/searchbox_back.bmp
  • QDownload/Skins/Default/searchresultlist_btn.bmp
  • QDownload/Skins/Default/seperate.bmp
  • QDownload/Skins/Default/spin.bmp
  • QDownload/Skins/Default/splitter.bmp
  • QDownload/Skins/Default/start.bmp
  • QDownload/Skins/Default/tab_ad.bmp
  • QDownload/Skins/Default/tab_download.bmp
  • QDownload/Skins/Default/tab_films.bmp
  • QDownload/Skins/Default/tab_parse.bmp
  • QDownload/Skins/Default/tab_search.bmp
  • QDownload/Skins/Default/tab_unescape.bmp
  • QDownload/Skins/Default/top.bmp
  • QDownload/Skins/Default/unescape_wnd_back.bmp
  • QDownload/Skins/Default/videolist_check.bmp
  • QDownload/Skins/Default/videolist_icon.bmp
  • QDownload/Skins/Default/vl.bmp
  • QDownload/Skins/Default/vl_cancle_select_all_button.bmp
  • QDownload/Skins/Default/vl_down_button.bmp
  • QDownload/Skins/Default/vl_select_all_button.bmp
  • QDownload/URFilms.exe
    .exe windows:4 windows x86 arch:x86

    b1c622e1f8c455c6ded7379cde3045c3


    Headers

    Imports

    Sections

  • QDownload/URFilms_Version.xml
    .xml
  • QDownload/Version.xml
    .xml
  • QDownload/ad/tab_ad.xml
    .xml
  • QDownload/media/parse.gif
    .gif
  • QDownload/media/searching.gif
    .gif
  • QDownload/media/update_ranklist.gif
    .gif
  • QDownload/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c85d8396f1ce855bc219450c4b2c265b


    Headers

    Imports

    Exports

    Sections

  • QDownload/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • QDownload/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • QDownload/recommend_image/20111243040243.jpg
    .jpg
  • QDownload/recommend_image/20112190439896.jpg
    .jpg
  • QDownload/recommend_image/20112261068390.jpg
    .jpg
  • QDownload/recommend_image/Thumbs.db
  • QDownload/recommend_image/big201010260708833836.jpg
    .jpg
  • QDownload/recommend_image/big201010260708838308.jpg
    .jpg
  • QDownload/recommend_image/big201010260708895140.jpg
    .jpg
  • QDownload/recommend_image/big201010260709971800.jpg
    .jpg
  • QDownload/recommend_image/big201011292304438183.jpg
    .jpg
  • QDownload/recommend_image/big2011011715454569070.jpg
    .jpg
  • QDownload/recommend_image/big2011012223141437202.jpg
    .jpg
  • QDownload/recommend_image/big2011020822323249937.jpg
    .jpg
  • QDownload/recommend_image/big2011021102340183907.jpg
    .jpg
  • QDownload/recommend_image/big2011021102340736268.jpg
    .jpg
  • QDownload/recommend_image/big2011021422350250411.jpg
    .jpg
  • QDownload/recommend_image/big2011021716490286615.jpg
    .jpg
  • QDownload/recommend_image/big2011022001390275505.jpg
    .jpg
  • QDownload/recommend_image/big2011022218202096144.jpg
    .jpg
  • QDownload/recommend_image/not_exist.jpg
    .jpg
  • QDownload/unescape-urfilms.html
    .html .js polyglot
  • QDownload/update_core.dll
    .dll windows:4 windows x86 arch:x86

    3a874585a1ebd9299d00ff01d03cbfe4


    Headers

    Imports

    Sections