General

  • Target

    5cd7cbef28299078682c79e5cbc61add_JaffaCakes118

  • Size

    11.1MB

  • MD5

    5cd7cbef28299078682c79e5cbc61add

  • SHA1

    9dc16bb1dca21eac9b284c17f91158255f70cbb9

  • SHA256

    b192d1b822e9b821a3459b87e97d07769872ffae62396492f14129a2563e1111

  • SHA512

    d43081cd091e4c4b3c29655798404327f0dcfe3428d9b9911adb7c9e099dc5dd380af41869b04210c3ef35b13072429eaab95ba0e1fa344300c17f355721b7b6

  • SSDEEP

    196608:lgetZqTbqp0WouV2jJpzbE1FnDRMiAf8zLGiEHRdstK9I1J18ZoS94bc:lFZqTbtldb4FDCf82XHRqtWQ3S+A

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 59 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5cd7cbef28299078682c79e5cbc61add_JaffaCakes118
    .rar
  • RayDown-Setup-v1.9.3.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    0a9b1c71fa1d8a5ac827b3902e1e432c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_YourSplash.bmp
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Program/BugReport.dll
    .dll windows:4 windows x86 arch:x86

    5f6b2090be1c9106d8e83a62f2aa9396


    Headers

    Imports

    Exports

    Sections

  • Program/CombineFlv.exe
    .exe windows:4 windows x86 arch:x86

    a21e4c69bca016593dbae74ff04bab0d


    Headers

    Imports

    Sections

  • Program/CoolDown.exe
    .exe windows:4 windows x86 arch:x86

    1fadecb46b0b5acd70d9eb8ffe13d463


    Headers

    Imports

    Sections

  • Program/CoolDown_Engine.dll
    .dll windows:4 windows x86 arch:x86

    aadfd1abfcffbf6954a2b52cd7a972ea


    Headers

    Imports

    Exports

    Sections

  • Program/CoolSee.exe
    .exe windows:4 windows x86 arch:x86

    4ded279961efa6134604e1114967d372


    Headers

    Imports

    Sections

  • Program/CoolSee.ico
  • Program/CoolSee.swf
  • Program/DLL.dll
    .dll windows:4 windows x86 arch:x86

    3a874585a1ebd9299d00ff01d03cbfe4


    Headers

    Imports

    Sections

  • Program/Debugger.ini
  • Program/FlvTool.dll
    .dll windows:4 windows x86 arch:x86

    f9f0a3e71f32ec7e7f67afefc7d3f1be


    Headers

    Imports

    Exports

    Sections

  • Program/GetUrl.htm
    .html .js polyglot
  • Program/LevinAbs.dll
    .dll windows:4 windows x86 arch:x86

    82946324efae0918f9a2aef7d1fd21e4


    Headers

    Imports

    Exports

    Sections

  • Program/LevinCore.dll
    .dll windows:4 windows x86 arch:x86

    5c4a483d38a55b67b837f328f577bd3f


    Headers

    Imports

    Exports

    Sections

  • Program/LevinCore.exe
    .exe windows:4 windows x86 arch:x86

    53b429a3477e3c2ce3a2a89add316bd0


    Headers

    Imports

    Sections

  • Program/MP4Core.exe
    .exe windows:4 windows x86 arch:x86

    54a506a43e4273fc1a030707c2f8b5ea


    Headers

    Imports

    Sections

  • Program/OnMetaF.dll
    .dll windows:4 windows x86 arch:x86

    9244a4cc81873d1e567aa1784fe7a1d3


    Headers

    Imports

    Exports

    Sections

  • Program/Player_pl.dll
    .dll windows:4 windows x86 arch:x86

    ed182460519da37b6473ed965bc4ac56


    Headers

    Imports

    Sections

  • Program/RayAM.exe
    .exe windows:4 windows x86 arch:x86

    9cdc01367ae1c082b459805683889f04


    Headers

    Imports

    Sections

  • Program/RayAssist.ini
  • Program/RaySpy.exe
    .exe windows:4 windows x86 arch:x86

    18b114f17b8ea5bbdd8d7cbf8467bbca


    Headers

    Imports

    Sections

  • Program/RaySpyCore.dll
    .dll windows:4 windows x86 arch:x86

    a81e26c2857b9019c9db337551dc92b1


    Headers

    Imports

    Exports

    Sections

  • Program/SetUpHelper.exe
    .exe windows:4 windows x86 arch:x86

    716eb7caec90704f8b956005911442d7


    Headers

    Imports

    Sections

  • Program/SkinMagicTrial.dll
    .dll windows:4 windows x86 arch:x86

    c8df08117592a75e9bc7e503b953168e


    Headers

    Imports

    Exports

    Sections

  • Program/SuperEngine.dll
    .dll windows:4 windows x86 arch:x86

    45cbf301543634c6cd04e53b2b9e06a7


    Headers

    Imports

    Exports

    Sections

  • Program/ad/coolsee_text_ad.xml
    .xml
  • Program/ad/down_wnd_ad.xml
    .xml
  • Program/ad/down_wnd_haoya.swf
  • Program/ad/down_wnd_qipai.swf
  • Program/ad/search_wnd_ad.xml
    .xml
  • Program/ad/swf_ad_version.xml
    .xml
  • Program/ad/swf_profile.xml
    .xml
  • Program/ad/text_ad_version.xml
    .xml
  • Program/ad/tools_wnd_qipai.swf
  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • Program/get_list_info.dll
    .dll windows:4 windows x86 arch:x86

    9fba457446af05b9eb1e563ca433746c


    Headers

    Imports

    Exports

    Sections

  • Program/js32.dll
    .dll windows:4 windows x86 arch:x86

    8a4081abc2c833f164926e41bfa8b681


    Headers

    Imports

    Exports

    Sections

  • Program/levin.dll
    .dll windows:4 windows x86 arch:x86

    0a0e59ea0f5c62ec550670027347ef54


    Headers

    Imports

    Sections

  • Program/levin_cdn.dll
    .dll windows:4 windows x86 arch:x86

    366176641e788e72f8e485887de252eb


    Headers

    Imports

    Exports

    Sections

  • Program/levin_hpr.dll
    .dll windows:4 windows x86 arch:x86

    387a741eda3b268e7c3892a7ee427342


    Headers

    Imports

    Sections

  • Program/levinier.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0161105552d54f2883328471ba716f0c


    Headers

    Imports

    Exports

    Sections

  • Program/media/download.wav
  • Program/media/searching.gif
    .gif
  • Program/mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • Program/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • Program/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Program/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Program/rank.xml
    .xml
  • Program/search_lib.dll
    .dll windows:4 windows x86 arch:x86

    66a2c2ea5c552166b9a763365c2dbc23


    Headers

    Imports

    Exports

    Sections

  • Program/search_site.xml
    .xml
  • Program/stlport_vc646.dll
    .dll windows:4 windows x86 arch:x86

    b1603c3e1c5acc291efe3235cc214391


    Headers

    Imports

    Exports

    Sections

  • RayConvert/CoolSee.swf
  • RayConvert/Language/Chinese_Simplified.ini
  • RayConvert/Language/Chinese_Traditional.ini
  • RayConvert/RayConvert.exe
    .exe windows:4 windows x86 arch:x86

    f09d718e297ad99cc117722c0d90371d


    Headers

    Imports

    Sections

  • RayConvert/RayConvertCore.xml
    .xml
  • RayConvert/RayConvertCore/convert.wav
  • RayConvert/RayConvertCore/ray_flv_flv.png
    .png
  • RayConvert/RayConvertCore/ray_mp3_onda_vx787.png
    .png
  • RayConvert/RayConvertCore/ray_mp3_samsung_yp-q1.png
    .png
  • RayConvert/RayConvertCore/ray_mp3_samsung_yp_p2.png
    .png
  • RayConvert/RayConvertCore/ray_mp3_sony_nwz.png
    .png
  • RayConvert/RayConvertCore/ray_mp3_teclast_c320.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_aigo_pn5.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_ainol.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_apple_ipod_classic.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_apple_ipod_nano.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_apple_ipod_touch.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_archos_archos605.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_meizu.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_microsoft_z817.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_microsoft_zune.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_newman_a3.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_oppo_s19.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_ramos_rm975.png
    .png
  • RayConvert/RayConvertCore/ray_mp4_ramos_t8.png
    .png
  • RayConvert/RayConvertCore/ray_music_aac.png
    .png
  • RayConvert/RayConvertCore/ray_music_mp3.png
    .png
  • RayConvert/RayConvertCore/ray_music_wma.png
    .png
  • RayConvert/RayConvertCore/ray_phone_apple_iphone.png
    .png
  • RayConvert/RayConvertCore/ray_phone_apple_iphone_3g.png
    .png
  • RayConvert/RayConvertCore/ray_phone_asus.png
    .png
  • RayConvert/RayConvertCore/ray_phone_blackberry.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dopod-838.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dopod_310.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dopod_595.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dopod_diamond.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dopod_p.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dvdrip_avi.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dvdrip_gp3.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dvdrip_mp4.png
    .png
  • RayConvert/RayConvertCore/ray_phone_dvdrip_wmv.png
    .png
  • RayConvert/RayConvertCore/ray_phone_ef-e6.png
    .png
  • RayConvert/RayConvertCore/ray_phone_gf-ipple.png
    .png
  • RayConvert/RayConvertCore/ray_phone_htc_diamond.png
    .png
  • RayConvert/RayConvertCore/ray_phone_htc_touchhd.png
    .png
  • RayConvert/RayConvertCore/ray_phone_htc_touchviva.png
    .png
  • RayConvert/RayConvertCore/ray_phone_lg.png
    .png
  • RayConvert/RayConvertCore/ray_phone_lnovon.png
    .png
  • RayConvert/RayConvertCore/ray_phone_m8.png
    .png
  • RayConvert/RayConvertCore/ray_phone_motorola_em.png
    .png
  • RayConvert/RayConvertCore/ray_phone_motorola_v3.png
    .png
  • RayConvert/RayConvertCore/ray_phone_motorola_v3x.png
    .png
  • RayConvert/RayConvertCore/ray_phone_motorola_ve.png
    .png
  • RayConvert/RayConvertCore/ray_phone_motorola_w270.png
    .png
  • RayConvert/RayConvertCore/ray_phone_motorola_z10.png
    .png
  • RayConvert/RayConvertCore/ray_phone_motorola_z3.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_3000.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_5000.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_6000.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_7000.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_8000.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_e71.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_music.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_n73.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_n81.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_n95.png
    .png
  • RayConvert/RayConvertCore/ray_phone_nokia_n96.png
    .jpg
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-e.png
    .png
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-f.png
    .png
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-g.png
    .png
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-i908.png
    .png
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-m.png
    .png
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-p.png
    .png
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-w.png
    .png
  • RayConvert/RayConvertCore/ray_phone_samsung_sgh-x.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_g.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_k.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_m.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_p1c.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_s.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_tx.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_w.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_w580.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_w810c.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_w980c.png
    .png
  • RayConvert/RayConvertCore/ray_phone_sonyericsson_x1.png
    .png
  • RayConvert/RayConvertCore/ray_phone_xp-sh.png
    .png
  • RayConvert/RayConvertCore/ray_psp_sonypsp.png
    .png
  • RayConvert/RayEncoder.exe
    .exe windows:4 windows x86 arch:x86

    dde971fc0f22842f872fe6f39f06aa5b


    Headers

    Imports

    Sections

  • RayConvert/RaySplitter.exe
    .exe windows:4 windows x86 arch:x86

    2b5c2296a16a3a3c6302298c6f11467c


    Headers

    Imports

    Sections

  • RayConvert/RaySplitterCore.exe
    .exe windows:4 windows x86 arch:x86

    dde971fc0f22842f872fe6f39f06aa5b


    Headers

    Imports

    Sections

  • RayConvert/RaySplitterLang.lst
  • RayConvert/SkinMagicTrial.dll
    .dll windows:4 windows x86 arch:x86

    590410002cd426ad7d1f3d4b2f8ce856


    Headers

    Imports

    Exports

    Sections

  • RayConvert/ad/convert_wnd_qipai.swf
  • RayConvert/ad/swf_profile.xml
    .xml
  • RayConvert/avcodec.dll
    .dll windows:4 windows x86 arch:x86

    86fe5a7ba3c62be492316e20e3fafc52


    Headers

    Imports

    Exports

    Sections

  • RayConvert/avdevice.dll
    .dll windows:4 windows x86 arch:x86

    f627cb2502652c680a214f120669b195


    Headers

    Imports

    Exports

    Sections

  • RayConvert/avformat.dll
    .dll windows:4 windows x86 arch:x86

    91d14a35e31cf889798d7c14999322d4


    Headers

    Imports

    Exports

    Sections

  • RayConvert/avutil.dll
    .dll windows:4 windows x86 arch:x86

    992b69c582c34030072b7a8cd2843c32


    Headers

    Imports

    Exports

    Sections

  • RayConvert/default.flv
  • RayConvert/swscale.dll
    .dll windows:4 windows x86 arch:x86

    d07a2ecae0e284548878cda786c9a8c2


    Headers

    Imports

    Exports

    Sections

  • RayDown.exe
    .exe windows:4 windows x86 arch:x86

    c2672e0a9c018d0160de23d96244befd


    Headers

    Imports

    Sections

  • haozip_tiny.200304.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/option.ini
  • $R0
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • 7zNew.data
    .7z
  • HaoZip.chm
    .chm
  • HaoZip.exe
    .exe windows:4 windows x86 arch:x86

    55239a21a6813dedc2f8eb76ba3f01eb


    Headers

    Imports

    Sections

  • HaoZipC.exe
    .exe windows:4 windows x86 arch:x86

    a1bbff8294f1350d497180a7eefc5ce5


    Headers

    Imports

    Sections

  • HaoZipUpdate.exe
    .exe windows:4 windows x86 arch:x86

    3c45d941c395a803914eed4956f5d94f


    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • TarNew.data
  • ZipNew.data
  • lang/HaoZipLang_chs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 好压免责声明.txt
  • iSoft_169.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 新云软件.url
    .url