FindProc
General
-
Target
46e78d4b2e44da87464f53c999aec849_JaffaCakes118
-
Size
6.8MB
-
MD5
46e78d4b2e44da87464f53c999aec849
-
SHA1
436b5395f2bfe3614ae45b8cf05b1fafe974d03f
-
SHA256
2ed788227624a712384ae9754bdb7930576ca519e8b257d8ccc98d12d8bbe441
-
SHA512
a2ec92b202c3fd4d4be6fc1e95b6f1f342ff7addd83afb852b65854d35f223ed89b8902691088e4970a73af669b8b65bcf0c9c19a4d89f05e39b2bccd2f048a6
-
SSDEEP
196608:EUBRDfzTdCpTsxPlL0o9Du7P9/H9QJ9MBjyX8WQl:E8lJCtsvgo929f9QbMBjk6
Score
3/10
Malware Config
Signatures
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 1 IoCs
Files
-
46e78d4b2e44da87464f53c999aec849_JaffaCakes118
b729b61eb1515fcf7b3e511e4e66258b
Headers
Imports
Sections
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 巴西.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 德国.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 意大利.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 法国.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 英格兰.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 荷兰.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 葡萄牙.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 西班牙.seskin
-
0
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
6
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
7
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
8
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
9
-
90
-
$APPDATA/SogouExplorer/Skin/2010世界杯 - 阿根廷.seskin
-
$APPDATA/SogouExplorer/Skin/搜狗浏览器 2010.seskin
-
$APPDATA/SogouExplorer/Skin/搜狗浏览器IE经典版.seskin
-
$APPDATA/SogouExplorer/Skin/搜狗浏览器‘Chrome’版.seskin
-
$APPDATA/SogouExplorer/Skin/搜狗浏览器时尚版.seskin
-
$APPDATA/SogouExplorer/Skin/搜狗浏览器水晶全透明版.seskin
-
$PLUGINSDIR/FindProcDLL.dll
e26d7460d0c04056b9226a899477ba4d
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/InstallOptions.dll
cd90e33ffbc335413a25300c682c83df
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/KillProcDLL.dll
d806a080e21508dd768fa70be247d2ae
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/System.dll
6c41c5e4d44f55745b925cc4e42b7fab
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/io.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsDialogs.dll
9ea5bdc8c90dfcffe309465c26c89758
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/overwriteinstall.ini
-
$PLUGINSDIR/setup1.bmp
-
$R0
796eead88034ffb5c6f610c67c32d1d0
Code Sign
Headers
Imports
Exports
Sections
-
FlashIcon.ico
-
Skin/搜狗浏览器 2010.seskin
-
StartPage/$R0
-
StartPage/Local/baidu.gif
-
StartPage/Local/baiduc.gif
-
StartPage/Local/checkbox.gif
-
StartPage/Local/checkbox1.gif
-
StartPage/Local/checkbox2.gif
-
StartPage/Local/close.gif
-
StartPage/Local/close.png
-
StartPage/Local/default.gif
-
StartPage/Local/default.jpg
-
StartPage/Local/default_page.ico
-
StartPage/Local/fenge.png
-
StartPage/Local/google.gif
-
StartPage/Local/googlec.gif
-
StartPage/Local/guding1.png
-
StartPage/Local/guding2.png
-
StartPage/Local/help.gif
-
StartPage/Local/ie.css
-
StartPage/Local/ie.js
-
StartPage/Local/iframe.html
-
StartPage/Local/iframe_wk.html
-
StartPage/Local/index.html
-
StartPage/Local/logo.gif
-
StartPage/Local/none.jpg
-
StartPage/Local/q1.png
-
StartPage/Local/q2.png
-
StartPage/Local/rbg.jpg
-
StartPage/Local/rbg0.jpg
-
StartPage/Local/rbg2.jpg
-
StartPage/Local/rbg3.jpg
-
StartPage/Local/reset.gif
-
StartPage/Local/sb.jpg
-
StartPage/Local/selmenu.png
-
StartPage/Local/set.gif
-
StartPage/Local/setcancel.gif
-
StartPage/Local/setok.gif
-
StartPage/Local/shadow1.jpg
-
StartPage/Local/shadow2.gif
-
StartPage/Local/sogou.gif
-
StartPage/Local/sogouc.gif
-
StartPage/Local/space.gif
-
StartPage/Local/tran1.png
-
StartPage/Local/tran2.png
-
StartPage/Local/tran3.png
-
StartPage/Local/wk.css
-
StartPage/Local/wk.js
-
StartPage/Selector/baidu_logo.png
-
StartPage/Selector/google_logo.png
-
StartPage/Selector/index.html
-
StartPage/Selector/pic_daohang.jpg
-
StartPage/Selector/pic_kongbai.jpg
-
StartPage/Selector/pic_sousuo.jpg
-
StartPage/Selector/pic_zuiai.jpg
-
StartPage/Selector/pic_zuiai_1.jpg
-
StartPage/Selector/pic_zuiai_2.jpg
-
StartPage/Selector/s_baidu_logo.png
-
StartPage/Selector/s_google_logo.png
-
StartPage/Selector/s_sogou_logo.png
-
StartPage/Selector/sogou_logo.png
-
StartPage/Selector/start_body_bg.jpg
-
StartPage/Selector/start_btn_daohang.png
-
StartPage/Selector/start_btn_daohang_hit.png
-
StartPage/Selector/start_btn_kongbai.png
-
StartPage/Selector/start_btn_kongbai_hit.png
-
StartPage/Selector/start_btn_light.png
-
StartPage/Selector/start_btn_qita.png
-
StartPage/Selector/start_btn_queding.png
-
StartPage/Selector/start_btn_queding_hit.png
-
StartPage/Selector/start_btn_queding_hover.png
-
StartPage/Selector/start_btn_sousuo.png
-
StartPage/Selector/start_btn_sousuo_hit.png
-
StartPage/Selector/start_btn_zidingyi.png
-
StartPage/Selector/start_btn_zidingyi_hit.png
-
StartPage/Selector/start_btn_zuiai.png
-
StartPage/Selector/start_btn_zuiai_hit.png
-
StartPage/Selector/start_checkbox_checked.png
-
StartPage/Selector/start_checkbox_hover.png
-
StartPage/Selector/start_checkbox_normal.png
-
StartPage/Selector/start_daohang_logo_bg.png
-
StartPage/Selector/start_ico_home.gif
-
StartPage/Selector/start_stage_arrow_daohang.png
-
StartPage/Selector/start_stage_arrow_kongbai.png
-
StartPage/Selector/start_stage_arrow_sousuo.png
-
StartPage/Selector/start_stage_arrow_zidingyi.png
-
StartPage/Selector/start_stage_arrow_zuiai.png
-
StartPage/Selector/start_stage_main.png
-
StartPage/Selector/start_text_1.png
-
StartPage/Selector/start_zidingyi_dizhikuang.gif
-
StartPage/Selector/start_zidingyi_icon.gif
-
StartPage/Selector/start_zidingyi_text.gif
-
UserInstruct/download.swf
-
UserInstruct/passport.swf
-
UserInstruct/passport_20.swf
-
UserInstruct/swichcore.swf
-
UserInstruct/tabscroll.swf
-
UserInstruct/videoExtract.swf
-
UserInstruct/videoOnTop.swf
-
install_flash_player.exe
8f26fcd857d64db1a0ee4f8bdb240223
Code Sign
Headers
Imports
Sections