General

  • Target

    6554d293b721648dd44a8fe44c47d80a_JaffaCakes118

  • Size

    9.8MB

  • MD5

    6554d293b721648dd44a8fe44c47d80a

  • SHA1

    8af1866593023943cef00ae301ce23e8bc3d105b

  • SHA256

    f032591ff92ac9f36254adcab78f85d13f6c7559ecd0e7cb782d3c49db70ca1b

  • SHA512

    f221f59b242afb02b04e0c5a6634875467651d582e4b1794da541f06f2e935234a0cb6870055605cf7296f658391a1ad78d32e9c5e3d0d3d6d6f670b6e1dbc28

  • SSDEEP

    196608:FuEKkPT8V0zjItTF8eD2T9I6D2IChPvmOGJaUPa2tLcKLj5IZSRWZ:FesjDD9dryjGJaUVLcKLCZ0q

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • 6554d293b721648dd44a8fe44c47d80a_JaffaCakes118
    .rar
  • nEO iMAGING/BitMapRes.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nEO iMAGING/DefaultPage/adError.htm
    .html
  • nEO iMAGING/DefaultPage/error.htm
    .html
  • nEO iMAGING/DefaultPage/icon_01.gif
    .gif
  • nEO iMAGING/DefaultPage/icon_02.gif
    .gif
  • nEO iMAGING/DefaultPage/img.jpg
    .jpg
  • nEO iMAGING/EasyFrame/bear_frame.neoFrame
  • nEO iMAGING/EasyFrame/dslr_frame.neoFrame
  • nEO iMAGING/EasyFrame/pattern_frame.neoFrame
  • nEO iMAGING/EasyFrame/white_margin.neoFrame
  • nEO iMAGING/Frame/NEO_FAV.TXT
  • nEO iMAGING/Frame/主题相框/cellie_SF2.NLF
  • nEO iMAGING/Frame/主题相框/cellie_SF2.jpg
    .jpg
  • nEO iMAGING/Frame/主题相框/stamp3.NLF
  • nEO iMAGING/Frame/主题相框/stamp3.jpg
    .jpg
  • nEO iMAGING/Frame/主题相框/可爱蛋蛋-1.jpg
    .jpg
  • nEO iMAGING/Frame/主题相框/可爱蛋蛋-1.nlf2
  • nEO iMAGING/Frame/主题相框/粉色拍立得01.jpg
    .jpg
  • nEO iMAGING/Frame/主题相框/粉色拍立得01.nlf2
  • nEO iMAGING/Frame/主题相框/蕾丝便签-2.jpg
    .jpg
  • nEO iMAGING/Frame/主题相框/蕾丝便签-2.nlf2
  • nEO iMAGING/Frame/官方模板/Book2.NLF
  • nEO iMAGING/Frame/官方模板/Book2.jpg
    .jpg
  • nEO iMAGING/Frame/官方模板/photo_layers.jpg
    .jpg
  • nEO iMAGING/Frame/官方模板/photo_layers.nlf2
  • nEO iMAGING/Frame/简洁/BlackMargin.LBL
  • nEO iMAGING/Frame/简洁/BlackMargin.NLF
  • nEO iMAGING/Frame/简洁/BlackMargin.jpg
    .jpg
  • nEO iMAGING/Frame/简洁/WhiteMargin.NLF
  • nEO iMAGING/Frame/简洁/WhiteMargin.jpg
    .jpg
  • nEO iMAGING/Frame/简洁/Ybb000.NLF
  • nEO iMAGING/Frame/简洁/Ybb000.jpg
    .jpg
  • nEO iMAGING/IJL15.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nEO iMAGING/Icons/SGI.ico
  • nEO iMAGING/Icons/arw.ico
  • nEO iMAGING/Icons/bmp.ico
  • nEO iMAGING/Icons/bw.ico
  • nEO iMAGING/Icons/cel.ico
  • nEO iMAGING/Icons/cr2.ico
  • nEO iMAGING/Icons/crw.ico
  • nEO iMAGING/Icons/cut.ico
  • nEO iMAGING/Icons/dib.ico
  • nEO iMAGING/Icons/dng.ico
  • nEO iMAGING/Icons/emf.ico
  • nEO iMAGING/Icons/eps.ico
  • nEO iMAGING/Icons/fax.ico
  • nEO iMAGING/Icons/gif.ico
  • nEO iMAGING/Icons/icb.ico
  • nEO iMAGING/Icons/ico.ico
  • nEO iMAGING/Icons/jpe.ico
  • nEO iMAGING/Icons/jpeg.ico
  • nEO iMAGING/Icons/jpg.ico
  • nEO iMAGING/Icons/kdc.ico
  • nEO iMAGING/Icons/mrw.ico
  • nEO iMAGING/Icons/nef.ico
  • nEO iMAGING/Icons/orf.ico
  • nEO iMAGING/Icons/pbm.ico
  • nEO iMAGING/Icons/pcc.ico
  • nEO iMAGING/Icons/pcd.ICO
  • nEO iMAGING/Icons/pcx.ICO
  • nEO iMAGING/Icons/pdd.ICO
  • nEO iMAGING/Icons/pef.ico
  • nEO iMAGING/Icons/pgm.ICO
  • nEO iMAGING/Icons/pic.ICO
  • nEO iMAGING/Icons/png.ICO
  • nEO iMAGING/Icons/ppm.ICO
  • nEO iMAGING/Icons/psd.ico
  • nEO iMAGING/Icons/psp.ICO
  • nEO iMAGING/Icons/raf.ico
  • nEO iMAGING/Icons/raw.ico
  • nEO iMAGING/Icons/rgb.ICO
  • nEO iMAGING/Icons/rgba.ICO
  • nEO iMAGING/Icons/rla.ico
  • nEO iMAGING/Icons/rle.ICO
  • nEO iMAGING/Icons/rpf.ICO
  • nEO iMAGING/Icons/tga.ICO
  • nEO iMAGING/Icons/tif.ICO
  • nEO iMAGING/Icons/tiff.ICO
  • nEO iMAGING/Icons/vda.ICO
  • nEO iMAGING/Icons/vst.ICO
  • nEO iMAGING/Icons/win.ICO
  • nEO iMAGING/Icons/wmf.ICO
  • nEO iMAGING/Icons/x3f.ico
  • nEO iMAGING/MSVCP71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/MSVCR71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/Mask/NEO_FAV.TXT
  • nEO iMAGING/Mask/官方模板/12.jpg
    .jpg
  • nEO iMAGING/Mask/官方模板/17.jpg
    .jpg
  • nEO iMAGING/Mask/官方模板/24.jpg
    .jpg
  • nEO iMAGING/Mask/官方模板/Brush.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Camera.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Chaos.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Diffuse.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Flame.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Lines.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Rose4.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Spray.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Twirl.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/Watercolor.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/angen2001_Camera1.jpg
    .jpg
  • nEO iMAGING/Mask/官方模板/berry.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/cat.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/feng.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/flower2.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/gu.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/letter1.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/love94happy1.jpg
    .jpg
  • nEO iMAGING/Mask/官方模板/n2.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/n4.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/rose31.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/shuo.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/wing.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/xian.JPG
    .jpg
  • nEO iMAGING/Mask/官方模板/ye.JPG
    .jpg
  • nEO iMAGING/MultiFrame/NEO_FAV.TXT
  • nEO iMAGING/MultiFrame/官方模板/3Small_1Large_Round_Ver.NLF3
  • nEO iMAGING/MultiFrame/官方模板/3Small_1Large_Round_Ver.jpg
    .jpg
  • nEO iMAGING/MultiFrame/官方模板/BlackKorea.NLF3
  • nEO iMAGING/MultiFrame/官方模板/BlackKorea.jpg
    .jpg
  • nEO iMAGING/MultiFrame/官方模板/JiaJia_A02.NLF3
  • nEO iMAGING/MultiFrame/官方模板/JiaJia_A02.jpg
    .jpg
  • nEO iMAGING/MultiFrame/官方模板/joyceChild.NLF3
  • nEO iMAGING/MultiFrame/官方模板/joyceChild.jpg
    .jpg
  • nEO iMAGING/NeoAgent.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nEO iMAGING/NeoOpenNeo.htm
    .html .js polyglot
  • nEO iMAGING/Pattern/Canvas03.jpg
    .jpg
  • nEO iMAGING/Pattern/Paper01.jpg
    .jpg
  • nEO iMAGING/Pattern/Paper03.jpg
    .jpg
  • nEO iMAGING/Pattern/Wall03.jpg
    .jpg
  • nEO iMAGING/Pattern/Wood01.jpg
    .jpg
  • nEO iMAGING/Pattern/Wood03.jpg
    .jpg
  • nEO iMAGING/Preset/1x2.nEOCP
  • nEO iMAGING/Preset/1x3.nEOCP
  • nEO iMAGING/Preset/2x1.nEOCP
  • nEO iMAGING/Preset/2x2.nEOCP
  • nEO iMAGING/Preset/3x1.nEOCP
  • nEO iMAGING/Preset/3x3.nEOCP
  • nEO iMAGING/Preset/ColorFilter.ini
  • nEO iMAGING/Preset/DSLR作品处理.neoAB
  • nEO iMAGING/Preset/可爱的回形针.NEOAB
  • nEO iMAGING/Preset/摄影作品发布前处理.neoAB
  • nEO iMAGING/Preset/油墨印刷的风格.NEOAB
  • nEO iMAGING/Preset/花样边框+水印.neoAB
  • nEO iMAGING/Preset/蓝色印象.NEOAB
  • nEO iMAGING/Resource.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • nEO iMAGING/Sample/01.jpg
    .jpg
  • nEO iMAGING/Sample/02.jpg
    .jpg
  • nEO iMAGING/Sample/03.jpg
    .jpg
  • nEO iMAGING/Sample/04.jpg
    .jpg
  • nEO iMAGING/SiteList.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nEO iMAGING/Skin/0/Message.lua
  • nEO iMAGING/Skin/0/Skin.lua
  • nEO iMAGING/Skin/0/border-bottom-fill.png
    .png
  • nEO iMAGING/Skin/0/border-bottom-left.png
    .png
  • nEO iMAGING/Skin/0/border-bottom-right.png
    .png
  • nEO iMAGING/Skin/0/border-left.png
    .png
  • nEO iMAGING/Skin/0/border-logo.png
    .png
  • nEO iMAGING/Skin/0/border-right.png
    .png
  • nEO iMAGING/Skin/0/border-top-fill.png
    .png
  • nEO iMAGING/Skin/0/border-top-left.png
    .png
  • nEO iMAGING/Skin/0/border-top-right.png
    .png
  • nEO iMAGING/Skin/0/close-click.png
    .png
  • nEO iMAGING/Skin/0/close-hover.png
    .png
  • nEO iMAGING/Skin/0/close-normal.png
    .png
  • nEO iMAGING/Skin/0/mini-click.png
    .png
  • nEO iMAGING/Skin/0/mini-hover.png
    .png
  • nEO iMAGING/Skin/0/mini-normal.png
    .png
  • nEO iMAGING/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/borlndmm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nEO iMAGING/calendar/NEO_FAV.TXT
  • nEO iMAGING/calendar/calendar.xml
    .xml
  • nEO iMAGING/calendar/custom.xml
    .xml
  • nEO iMAGING/calendar/官方模板/田野.nlc
    .zip
  • calendar.jpg
    .jpg
  • config.xml
    .xml
  • mask.jpg
    .jpg
  • nEO iMAGING/calendar/官方模板/秋天.nlc
    .zip
  • calendar.jpg
    .jpg
  • config.xml
    .xml
  • mask.jpg
    .jpg
  • nEO iMAGING/default_preview_image.JPG
    .jpg
  • nEO iMAGING/default_thumbnail_bg.jpg
    .jpg
  • nEO iMAGING/easysnap.dll
    .dll windows:4 windows x86 arch:x86

    c3d5b2440405115d1089496d05ed7b41


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/nEOiMAGING.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nEO iMAGING/nEOiMAGING.ini
  • nEO iMAGING/niIEMagic.html
    .html
  • nEO iMAGING/niUtils1.dll
    .dll windows:4 windows x86 arch:x86

    832cb459b90392760a127d69aaa90a65


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils2.dll
    .dll windows:4 windows x86 arch:x86

    5f95b30b82bd5b5af8e122b03f038936


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils3.dll
    .dll windows:4 windows x86 arch:x86

    092bb1f64f4c92549c812e2160578950


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils_x1.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    876f82b6ac0d3bce72e78b20e8f50d43


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils_x3.dll
    .dll windows:4 windows x86 arch:x86

    52e2c6db43f83e1020e69194c8758a08


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils_x4.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0db74d2a1c354a069467e9e479063faa


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils_x6.dll
    .dll windows:4 windows x86 arch:x86

    3709b88712d1ac4dd47559a06934d584


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils_x7.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6eed2140f03c3a56cd352f2ac1bd30b6


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/niUtils_x8.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a9c14bcf47e0b3f4ce568b137cf89aa8


    Headers

    Imports

    Exports

    Sections

  • nEO iMAGING/pictures/动物/10-0.gif
    .gif
  • nEO iMAGING/pictures/动物/11-0.gif
    .gif
  • nEO iMAGING/pictures/动物/12-0.gif
    .gif
  • nEO iMAGING/pictures/动物/13-0.gif
    .gif
  • nEO iMAGING/pictures/动物/14-0.gif
    .gif
  • nEO iMAGING/pictures/动物/15-0.gif
    .gif
  • nEO iMAGING/pictures/动物/16-0.gif
    .gif
  • nEO iMAGING/pictures/动物/17-0.gif
    .gif
  • nEO iMAGING/pictures/动物/29-0.gif
    .gif
  • nEO iMAGING/pictures/动物/30-0.gif
    .gif
  • nEO iMAGING/pictures/动物/31-0.gif
    .gif
  • nEO iMAGING/pictures/动物/32-0.gif
    .gif
  • nEO iMAGING/pictures/动物/33-0.gif
    .gif
  • nEO iMAGING/pictures/动物/34-0.gif
    .gif
  • nEO iMAGING/pictures/动物/9-0.gif
    .gif
  • nEO iMAGING/pictures/常用/1-0.gif
    .gif
  • nEO iMAGING/pictures/常用/18-0.gif
    .gif
  • nEO iMAGING/pictures/常用/19-0.gif
    .gif
  • nEO iMAGING/pictures/常用/2-0.gif
    .gif
  • nEO iMAGING/pictures/常用/20-0.gif
    .gif
  • nEO iMAGING/pictures/常用/21-0.gif
    .gif
  • nEO iMAGING/pictures/常用/22-0.gif
    .gif
  • nEO iMAGING/pictures/常用/23-0.gif
    .gif
  • nEO iMAGING/pictures/常用/24-0.gif
    .gif
  • nEO iMAGING/pictures/常用/25-0.gif
    .gif
  • nEO iMAGING/pictures/常用/26-0.gif
    .gif
  • nEO iMAGING/pictures/常用/27-0.gif
    .gif
  • nEO iMAGING/pictures/常用/28-0.gif
    .gif
  • nEO iMAGING/pictures/常用/3-0.gif
    .gif
  • nEO iMAGING/pictures/常用/36-0.gif
    .gif
  • nEO iMAGING/pictures/常用/37-0.gif
    .gif
  • nEO iMAGING/pictures/常用/38-0.gif
    .gif
  • nEO iMAGING/pictures/常用/39-0.gif
    .gif
  • nEO iMAGING/pictures/常用/4-0.gif
    .gif
  • nEO iMAGING/pictures/常用/5-0.gif
    .gif
  • nEO iMAGING/pictures/常用/54-0.gif
    .gif
  • nEO iMAGING/pictures/常用/55-0.gif
    .gif
  • nEO iMAGING/pictures/常用/56-0.gif
    .gif
  • nEO iMAGING/pictures/常用/6-0.gif
    .gif
  • nEO iMAGING/pictures/常用/7-0.gif
    .gif
  • nEO iMAGING/pictures/常用/8-0.gif
    .gif
  • nEO iMAGING/pictures/常用/圣诞老人-1帽子.gif
    .gif
  • nEO iMAGING/pictures/常用/圣诞老人-2左眉.gif
    .gif
  • nEO iMAGING/pictures/常用/圣诞老人-3右眉.gif
    .gif
  • nEO iMAGING/pictures/常用/圣诞老人-4胡子.gif
    .gif
  • nEO iMAGING/pictures/星座/42-0.gif
    .gif
  • nEO iMAGING/pictures/星座/43-0.gif
    .gif
  • nEO iMAGING/pictures/星座/44-0.gif
    .gif
  • nEO iMAGING/pictures/星座/45-0.gif
    .gif
  • nEO iMAGING/pictures/星座/46-0.gif
    .gif
  • nEO iMAGING/pictures/星座/47-0.gif
    .gif
  • nEO iMAGING/pictures/星座/48-1.gif
    .gif
  • nEO iMAGING/pictures/星座/49-0.gif
    .gif
  • nEO iMAGING/pictures/星座/50-0.gif
    .gif
  • nEO iMAGING/pictures/星座/51-0.gif
    .gif
  • nEO iMAGING/pictures/星座/52-0.gif
    .gif
  • nEO iMAGING/pictures/星座/53-0.gif
    .gif
  • nEO iMAGING/sticker_photos/爱情/1.PNG
    .png
  • nEO iMAGING/sticker_photos/爱情/18.png
    .png
  • nEO iMAGING/sticker_photos/爱情/19.png
    .png
  • nEO iMAGING/sticker_photos/爱情/4.PNG
    .png
  • nEO iMAGING/sticker_photos/爱情/8.PNG
    .png
  • nEO iMAGING/sticker_photos/非主流/17.png
    .png
  • nEO iMAGING/sticker_photos/非主流/20.png
    .png
  • nEO iMAGING/sticker_photos/非主流/21.png
    .png
  • nEO iMAGING/sticker_photos/非主流/24.png
    .png
  • nEO iMAGING/sticker_photos/非主流/25.png
    .png
  • nEO iMAGING/water_stamp0.png
    .png
  • nEO iMAGING/星光十字.psd