General

  • Target

    4864cdad631d4290aa26b68b7b1123e4_JaffaCakes118

  • Size

    9.6MB

  • MD5

    4864cdad631d4290aa26b68b7b1123e4

  • SHA1

    2c3039e7ce15a82136eb49cfb77ad57cad3e1f8d

  • SHA256

    3f51f28a951b62bb3c61c7016b6ba3df4d63b4e840c96da389e1000d535acd07

  • SHA512

    84b832b320b0ac7e2ef329cfd9d812358c9520c736642c26d66b95e683b18e0d250cf09269fa0d000907803d2fd86c03a0007ab3bcd90e868451c99295bb8f1c

  • SSDEEP

    196608:nQ4C1swd+o/lgwmrtovOhJFihk5xYdpbO3rB4M/p42WR7scXNaIob6g:xud+onfOzrxPCqp9W+LVeg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 4864cdad631d4290aa26b68b7b1123e4_JaffaCakes118
    .rar
  • 01.官方欢迎屏幕字体补丁/CDX4欢迎屏幕字体补丁.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 02.官方修复补丁-解决安装某些软件后程序无法启动/CGSX4HotFix1.exe
    .exe windows:4 windows x86 arch:x86

    5fca7f0fc8c16d55fed0e805fc0ad295


    Code Sign

    Headers

    Imports

    Sections

  • 03.常用插件(可解决过期问题)/CorelDRW X4插件包.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/waterctrl.dll
    .dll windows:4 windows x86 arch:x86

    cd2ffec7e2da8a6dd4a84791a95597a7


    Headers

    Imports

    Exports

    Sections

  • 03.常用插件(可解决过期问题)/说明.txt
  • 04.另存为9.0特别版补丁/CdrCore.dll
    .dll windows:4 windows x86 arch:x86

    6043a40e8d1d48baf27b3e9a0075b337


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 04.另存为9.0特别版补丁/SP2/CdrCore.dll
    .dll windows:4 windows x86 arch:x86

    754e9b0a1aa523c9ad644ace0845b4b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 04.另存为9.0特别版补丁/说明.txt
  • 155绿色软件站.url
    .url
  • 安装说明.txt