General

  • Target

    3c0c1f12d7fe5771635a689afb8857fa_JaffaCakes118

  • Size

    3.5MB

  • MD5

    3c0c1f12d7fe5771635a689afb8857fa

  • SHA1

    4a39845f2eb00cc3b03fb686deb357431bfffd72

  • SHA256

    433ba105171af5108ff9b850416128db6236078e1f00ea5a48665c11e2156f8b

  • SHA512

    811c2ff7abaa61056ebd226fd88fa8f57d89213bd1a0e9ac91c33aee964d618d57e12a30bb1f3d0532a35a11f533689e3678eb2c7aa8208b442a9496f240e8ea

  • SSDEEP

    98304:PUTp+Ay5ovtcLPh3aThGXGlvyGqxlI4eoRzPbu:PO+A2ctcThqAXGkGIXC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 3c0c1f12d7fe5771635a689afb8857fa_JaffaCakes118
    .rar
  • Setup_mini.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • con_book.ini
  • ebook_Mini.exe
    .exe windows:4 windows x86 arch:x86

    6befcb23c66633e1a7848fd08dab91b0


    Headers

    Imports

    Exports

    Sections

  • makedll.dll
    .dll windows:4 windows x86 arch:x86

    5e300ec266bfcddf8c2ae4ec9327837d


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • picture_conver.dll
    .dll windows:4 windows x86 arch:x86

    6845ef96b8dd621d80be53d09f78fa90


    Headers

    Imports

    Exports

    Sections

  • strings/zh-CN.strings
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url