General

  • Target

    4465e8bc363fb3ddcbf578f03b8b68b7_JaffaCakes118

  • Size

    9.6MB

  • MD5

    4465e8bc363fb3ddcbf578f03b8b68b7

  • SHA1

    76988f045f4a591a7977ecab8e9c1fc323ab3e0b

  • SHA256

    da902ac646e3d3b310faceeb486701265676fc3fafb6a78fbed6666be5ea9f15

  • SHA512

    56ae15cd61f0d8249b0e00d19ebf98072a5fa3253f506ece8412bd5cb4cd2446463ccab403ec512a3c2273d72d5308859a1c981ee2aa801e44af7d14617d2c1e

  • SSDEEP

    196608:9cF4cPIrz1EgPi0wP9TrglALG86/3ItdY1zM+Yg89Ld8:uy7rz1Ex0KklAL8+dY13OLi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 51 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 8 IoCs

Files

  • 4465e8bc363fb3ddcbf578f03b8b68b7_JaffaCakes118
    .rar
  • GSPSTR.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Com.dll
    .dll windows:4 windows x86 arch:x86

    bed70185f8672c7a99d37171dfb0f4d1


    Headers

    Imports

    Exports

    Sections

  • Config.ini
  • DATA/GSP.db
  • LHT_mdibmp.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Md5.dll
    .dll windows:4 windows x86 arch:x86

    9e7a1d90cfa93e6f1642653b92db15aa


    Headers

    Imports

    Exports

    Sections

  • Thumbs.db
  • Update.exe
    .exe windows:4 windows x86 arch:x86

    62f205fe3d5e06c190cbad78ac9b9e4e


    Headers

    Imports

    Sections

  • app.dll
    .dll windows:1 windows x86 arch:x86

    b10c12ef509b81f127f33a5b95fa0814


    Headers

    Imports

    Exports

    Sections

  • basic.dll
    .dll windows:1 windows x86 arch:x86

    3832be5669531dfd274d13d01ef15551


    Headers

    Imports

    Exports

    Sections

  • basicdw.dll
    .dll windows:1 windows x86 arch:x86

    047775ae5f46133b58d18fa5b35aeb4e


    Headers

    Imports

    Exports

    Sections

  • buy.dll
    .dll windows:1 windows x86 arch:x86

    2b87af89189e9ecaa4120347ab27a3f3


    Headers

    Imports

    Exports

    Sections

  • buydw.dll
    .dll windows:1 windows x86 arch:x86

    047775ae5f46133b58d18fa5b35aeb4e


    Headers

    Imports

    Exports

    Sections

  • dbbackup.exe
    .exe windows:4 windows x86 arch:x86

    78db4768721a27cda174dfbee6a12a48


    Headers

    Imports

    Sections

  • dbcon8.dll
    .dll windows:4 windows x86 arch:x86

    1cbb89d222e5d9dbe2180bd310e4906c


    Headers

    Imports

    Exports

    Sections

  • dbctrs8.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d26e52d8913fadc8bca9cec8f97b1019


    Headers

    Imports

    Exports

    Sections

  • dbeng8.exe
    .exe windows:4 windows x86 arch:x86

    b8d16fa6ce45e76cf8a9ccf7537ef0be


    Headers

    Imports

    Sections

  • dblgen8.dll
    .dll windows:4 windows x86 arch:x86

    46039de89f8560750f5a6dacd1c7a453


    Headers

    Imports

    Exports

    Sections

  • dblib8.dll
    .dll windows:4 windows x86 arch:x86

    5892a70fc17081c943334fcd02250cee


    Headers

    Imports

    Exports

    Sections

  • dbodbc8.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    445fd4c0f473de5cb49256f48e6d4e36


    Headers

    Imports

    Exports

    Sections

  • dbserv8.dll
    .dll windows:4 windows x86 arch:x86

    8db84d09f3768e784610f35bd072de64


    Headers

    Imports

    Exports

    Sections

  • dbsrv8.exe
    .exe windows:4 windows x86 arch:x86

    6c26855a3b500ca60f2aa033688eecaf


    Headers

    Imports

    Sections

  • dbstop.exe
    .exe windows:4 windows x86 arch:x86

    c80c9fd8ad939c5f63d6e2c0739dc025


    Headers

    Imports

    Sections

  • dbtool8.dll
    .dll windows:4 windows x86 arch:x86

    fa2efa35dbfa070012abf1ead6c25107


    Headers

    Imports

    Exports

    Sections

  • des64.dll
    .dll windows:4 windows x86 arch:x86

    cd76978f53dd605c300155ebad3ae998


    Headers

    Imports

    Exports

    Sections

  • error.dll
    .dll windows:1 windows x86 arch:x86

    9f05641bfa987830995e79f9d6eee3a2


    Headers

    Imports

    Exports

    Sections

  • finance.dll
    .dll windows:1 windows x86 arch:x86

    9b8de761642b3b2362ffd1bc15b1b234


    Headers

    Imports

    Exports

    Sections

  • function.dll
    .dll windows:1 windows x86 arch:x86

    2e89758c4b85de0cf80348c24388a58b


    Headers

    Imports

    Exports

    Sections

  • gsp.exe
    .exe windows:1 windows x86 arch:x86

    699035716eff0f4cbc45b97c4ff099a5


    Headers

    Imports

    Sections

  • gsp.exe.manifest
  • human.dll
    .dll windows:1 windows x86 arch:x86

    3854a99d535c6b46a6f789f86d3d7d91


    Headers

    Imports

    Exports

    Sections

  • ico/Add.ico
  • ico/Arrow-Left.ico
  • ico/Arrow-Right.ico
  • ico/Back.ico
  • ico/Close.ico
  • ico/Date.ico
  • ico/Download.ico
  • ico/Folderclose.ico
  • ico/Folderopen.ico
  • ico/Forward.ico
  • ico/ICO.psd
  • ico/Maintenance.ico
  • ico/Nopic.jpg
    .jpg
  • ico/Ok.ico
  • ico/Password.ico
  • ico/Public.ico
  • ico/Refresh.ico
  • ico/Refresh1.ico
  • ico/Safari.ico
  • ico/Stats.ico
  • ico/Thumbs.db
  • ico/Up.ico
  • ico/Updatemdb.ico
  • ico/Winamp.ico
  • ico/add1.ico
  • ico/check.ico
  • ico/customer.ico
  • ico/databak.ico
  • ico/date1.ico
  • ico/datea.ico
  • ico/db.ico
  • ico/delete.ico
  • ico/delete111.ico
  • ico/down.gif
    .gif
  • ico/down.ico
  • ico/edccit.ICO
  • ico/edit.ico
  • ico/edit1.ICO
  • ico/edit3.ico
  • ico/editaf.ICO
  • ico/end.ico
  • ico/excel.ico
  • ico/exit.ico
  • ico/exit1.ico
  • ico/exitq.ico
  • ico/find.ico
  • ico/finds.ico
  • ico/findsa.ico
  • ico/first.ico
  • ico/hand.ico
  • ico/import.ico
  • ico/in.ico
  • ico/ina.ico
  • ico/item.gif
    .gif
  • ico/kc.ico
  • ico/key.ico
  • ico/keyqqq.ico
  • ico/logo.ico
  • ico/new.ico
  • ico/new1.ico
  • ico/online.ico
  • ico/onlinea.ico
  • ico/out.ico
  • ico/photo.ico
  • ico/print.ico
  • ico/printer.ico
  • ico/product.ico
  • ico/product1.ico
  • ico/sale.ico
  • ico/salea.ico
  • ico/save.ico
  • ico/setup.ico
  • ico/sfc.ico
  • ico/supplier.ico
  • ico/trans.ico
  • ico/up.bmp
  • ico/up.gif
    .gif
  • ico/user.gif
    .gif
  • ico/user.ico
  • ico/yj.ico
  • libjcc.dll
    .dll windows:4 windows x86 arch:x86

    98596f3e5d37e9c19b26b7b51d9ef9fd


    Headers

    Imports

    Exports

    Sections

  • libjsybheap.dll
    .dll windows:4 windows x86 arch:x86

    cd185ae96e493c13224d6c93f6fa483f


    Headers

    Imports

    Exports

    Sections

  • libsybbr.dll
    .dll windows:4 windows x86 arch:x86

    ea34a206d39502dc66d05b5f249f09c0


    Headers

    Imports

    Exports

    Sections

  • menu_kit.dll
    .dll windows:1 windows x86 arch:x86

    d1910d572b6bc416af5e05fafac1bf15


    Headers

    Imports

    Exports

    Sections

  • myobject.dll
    .dll windows:1 windows x86 arch:x86

    17caee2e0245ee785a8b6c2ae2e8bbdd


    Headers

    Imports

    Exports

    Sections

  • pbdwe90.dll
    .dll windows:4 windows x86 arch:x86

    9798a64cf49f5c0685e7495494887d11


    Headers

    Imports

    Exports

    Sections

  • pbmss90.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    431a7249710495af97317169bd47d2c1


    Headers

    Imports

    Exports

    Sections

  • pbodb90.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3fdbe0f48e44d352309e67103520410b


    Headers

    Imports

    Exports

    Sections

  • pbodb90.ini
  • pbtra90.dll
    .dll windows:4 windows x86 arch:x86

    a4643102e864b035ba999f124366793a


    Headers

    Imports

    Exports

    Sections

  • pbvm90.dll
    .dll windows:4 windows x86 arch:x86

    488a02bfb552cd3f3de7ad4be6b3e52c


    Headers

    Imports

    Exports

    Sections

  • pslib21.dll
    .dll windows:4 windows x86 arch:x86

    3b150b943592940b53b902ab1cb9e8e0


    Headers

    Imports

    Exports

    Sections

  • report.dll
    .dll windows:1 windows x86 arch:x86

    a19e76ff976c5a2c67e9021d812826ab


    Headers

    Imports

    Exports

    Sections

  • sale.dll
    .dll windows:1 windows x86 arch:x86

    a5489df972c57d83d5cbab2e09b9fdd6


    Headers

    Imports

    Exports

    Sections

  • saledw.dll
    .dll windows:1 windows x86 arch:x86

    047775ae5f46133b58d18fa5b35aeb4e


    Headers

    Imports

    Exports

    Sections

  • seinweb.dll
    .dll windows:4 windows x86 arch:x86

    12a21b6e423c02e7ff8f5138a8d839c1


    Headers

    Imports

    Exports

    Sections

  • store.dll
    .dll windows:1 windows x86 arch:x86

    b895bd967958b99aec5ca7e6619b844c


    Headers

    Imports

    Exports

    Sections

  • storedw.dll
    .dll windows:1 windows x86 arch:x86

    047775ae5f46133b58d18fa5b35aeb4e


    Headers

    Imports

    Exports

    Sections

  • ui.dll
    .dll windows:1 windows x86 arch:x86

    09b4aa711a6cbfc8ad4e6f2eeb02aa8d


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • update.exe.manifest
  • winsock.dll
    .dll windows:1 windows x86 arch:x86

    0a06150464c19ffc26f6be510cf51660


    Headers

    Imports

    Exports

    Sections

  • yitesoft.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • sj128.ico
  • sj128url.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • sj128.ico
  • yitesoft.ico
  • ҩƷʽ.lnk
    .lnk
  • ˵.txt
  • 新云软件.url
    .url