General

  • Target

    48136ea3a8a3ee1b381101968948e424_JaffaCakes118

  • Size

    7.7MB

  • MD5

    48136ea3a8a3ee1b381101968948e424

  • SHA1

    0e4ccd04f4405e53869e3c4ec04f6ff6f09b401b

  • SHA256

    e2df81ed8a6da3d4add1fe060e38de26f077a22417052bd3e3afd5e888733bc6

  • SHA512

    2b33c76c4ce15099166e8dac481b26c85c887c87476e5efb24f7f4dea303fa4c7dfe5a0b551aba148e10e21a9c4e13a2873e282de0b654a4fb9be0903d4061b2

  • SSDEEP

    196608:yHA7L9OJFQnnviuYwTlEoWXsjpJLZx7tLQd+HHimLRLn:bF5nviuFOoW8jbh4+HCsRb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 48136ea3a8a3ee1b381101968948e424_JaffaCakes118
    .rar
  • SamingOKR-v1.0/ClientRegist.dll
    .dll windows:4 windows x86 arch:x86

    0b04a4e4943ca310c43505d103d4e403


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    2a1ab6b72adad6b03d0746b0a5fa55d6


    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/HZK16
  • SamingOKR-v1.0/NTDISK.SYS
    .sys windows:5 windows x86 arch:x86

    4bbad22ea0aa3c590edd127757f38e80


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/OneXupdate.exe
    .exe windows:4 windows x86 arch:x86

    bb2e1b4b57c4038d64fd893e0e1a0018


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/SamIo.dll
    .dll windows:4 windows x86 arch:x86

    7fe150a10292c5ba39f70e94d0174448


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/SamIo.sys
    .sys windows:5 windows x86 arch:x86

    172b54da983eaa27abf08d8ed525b840


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/SamPMon.sys
    .sys windows:5 windows x86 arch:x86

    7ab8db32af6f2461ef7d2355cec0cd8c


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/Update.cfg
  • SamingOKR-v1.0/bufopti.exe
    .exe windows:4 windows x86 arch:x86

    93b50d5e3d5be7e2fbb71562d8c72cc6


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/deldir
    .exe windows:4 windows x86 arch:x86

    6e0a1c5ba72d2f43a814e20800bed769


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/diskop.dll
    .dll windows:4 windows x86 arch:x86

    32b18e8a769bf7717d9433a56cc40d3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/enc.dll
    .dll windows:4 windows x86 arch:x86

    11a34fbb95321a9cb8e4e4e0fd9ef7a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/eprom.dat
  • SamingOKR-v1.0/font.dat
  • SamingOKR-v1.0/graph.dat
  • SamingOKR-v1.0/graph.pic
  • SamingOKR-v1.0/language/bmp.ini
    .ps1
  • SamingOKR-v1.0/language/help.chm
    .chm
  • SamingOKR-v1.0/language/image/INFO.ICO
  • SamingOKR-v1.0/language/image/MENULEFT.bmp
  • SamingOKR-v1.0/language/image/Thumbs.db
  • SamingOKR-v1.0/language/image/copy.bmp
  • SamingOKR-v1.0/language/image/last.bmp
  • SamingOKR-v1.0/language/image/license.bmp
  • SamingOKR-v1.0/language/image/option.bmp
  • SamingOKR-v1.0/language/image/reboot.bmp
  • SamingOKR-v1.0/language/image/t_left.bmp
  • SamingOKR-v1.0/language/image/t_operate.bmp
  • SamingOKR-v1.0/language/image/t_reboot.bmp
  • SamingOKR-v1.0/language/image/t_setting.bmp
  • SamingOKR-v1.0/language/image/t_uninsave.bmp
  • SamingOKR-v1.0/language/image/transfer.bmp
  • SamingOKR-v1.0/language/image/transfer2.bmp
  • SamingOKR-v1.0/language/image/trayicon.ico
  • SamingOKR-v1.0/language/image/type.bmp
  • SamingOKR-v1.0/language/image/un-left.bmp
  • SamingOKR-v1.0/language/image/viewset.bmp
  • SamingOKR-v1.0/language/license.txt
  • SamingOKR-v1.0/language/pic/BG_VDF.bmp
  • SamingOKR-v1.0/language/pic/Close1.png
    .png
  • SamingOKR-v1.0/language/pic/Close2.png
    .png
  • SamingOKR-v1.0/language/pic/Close3.png
    .png
  • SamingOKR-v1.0/language/pic/Close4.png
    .png
  • SamingOKR-v1.0/language/pic/GB-Child.png
    .png
  • SamingOKR-v1.0/language/pic/GB-Main.bmp
  • SamingOKR-v1.0/language/pic/GB-Main.png
    .png
  • SamingOKR-v1.0/language/pic/Min1.png
    .png
  • SamingOKR-v1.0/language/pic/Min2.png
    .png
  • SamingOKR-v1.0/language/pic/Min3.png
    .png
  • SamingOKR-v1.0/language/pic/Thumbs.db
  • SamingOKR-v1.0/language/pic/tit.gif
    .gif
  • SamingOKR-v1.0/language/string.ini
    .ps1
  • SamingOKR-v1.0/loadtray.exe
    .exe windows:4 windows x86 arch:x86

    24bdae551a4ea1d96e9cbc4ee4b30335


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f9a6d48b4db89541699313524a5cdd4a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/mulservice
    .exe windows:4 windows x86 arch:x86

    a16f605ea9a23f6c6f1e3f0afaa11e2a


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/mulservice.exe
    .exe windows:4 windows x86 arch:x86

    71a0befc943c81540871d862e05cf007


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/multiface
    .exe windows:4 windows x86 arch:x86

    c103704ac6a21e43f9a1244f5f999027


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/multiface.exe
    .exe windows:4 windows x86 arch:x86

    ffe32d738b0aa78e39f154701f01ce2a


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/multimon.exe
    .exe windows:4 windows x86 arch:x86

    b5207f3f1224b40c8e0c4ff7f83652a1


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/multitray.exe
    .exe windows:4 windows x86 arch:x86

    23a5982292c9b806544dd818f8aae600


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/ntdisk64.sys
    .sys windows:5 windows x64 arch:x64

    47d7f9f2a7ca8a87d918ff251ee58c10


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/pmondll.dll
    .dll windows:4 windows x86 arch:x86

    8287d769b53374d368e1e3c6129a6cc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/procspy.ini
  • SamingOKR-v1.0/reboot.exe
    .exe windows:4 windows x86 arch:x86

    f7aaed7eefbc27e61dec553480c11871


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/reschk
  • SamingOKR-v1.0/safnt.sys
    .sys windows:5 windows x86 arch:x86

    34ca3ca91318dec45274f01eff439ecc


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/safnt64.sys
    .sys windows:5 windows x64 arch:x64

    8af9368f0f7b86601b7b77bfa3d445ee


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/samio64.sys
    .sys windows:5 windows x64 arch:x64

    3e7b9b4b477563fa8513bdbab0c32edf


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/sampmon64.sys
    .sys windows:5 windows x64 arch:x64

    4a8371b56fb884d17504dd2597eb687e


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/samsys.sys
    .sys windows:5 windows x86 arch:x86

    1772253c72eb0079b652e61e6c5bcee3


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/samsys64.sys
    .sys windows:5 windows x64 arch:x64

    bba115408f19c2966de4577f25ab8e95


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/setup.exe
    .exe windows:4 windows x86 arch:x86

    cdc3b519b1c27e41389cc78887f127cb


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/setup.ini
  • SamingOKR-v1.0/smabout
    .exe windows:4 windows x86 arch:x86

    d7ad71b128203d841f60f78e7330f475


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/smabout.exe
    .exe windows:4 windows x86 arch:x86

    72317140df99a0385eda3854e8b804fa


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1c1b3317d1260b574db4e7037a3d6f01


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/universal.dll
    .dll windows:4 windows x86 arch:x86

    c6917a43ec7f471fb3ae2d0ca4c91627


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/usbdog.dll
    .dll windows:4 windows x86 arch:x86

    97c1e83aaf572f56063320c2cb82af45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/windisk.dll
    .dll windows:4 windows x86 arch:x86

    2630086d5e7b34b2f6e20286b56d6b3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SamingOKR-v1.0/xsam.exe
    .exe windows:4 windows x86 arch:x86

    b598cdf3bd8ddd4aa340f410b2227f28


    Code Sign

    Headers

    Imports

    Sections

  • SamingOKR-v1.0/新云软件.url
    .url