Overview

overview

7

Static

static

3

mpkcd-v2011v1.exe

windows7-x64

7

mpkcd-v2011v1.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

API_COM.dll

windows7-x64

3

API_COM.dll

windows10-2004-x64

3

Mwic_32.dll

windows7-x64

3

Mwic_32.dll

windows10-2004-x64

3

POS58/pos5...DD.dll

windows7-x64

3

POS58/pos5...DD.dll

windows10-2004-x64

3

POS58/pos5...UI.dll

windows7-x64

3

POS58/pos5...UI.dll

windows10-2004-x64

3

POS58/pos5...58.dll

windows7-x64

3

POS58/pos5...58.dll

windows10-2004-x64

3

I386/RASDD.dll

windows7-x64

3

I386/RASDD.dll

windows10-2004-x64

3

I386/RASDDUI.dll

windows7-x64

3

I386/RASDDUI.dll

windows10-2004-x64

3

POS58.dll

windows7-x64

3

POS58.dll

windows10-2004-x64

3

POS58/pos5...OR.dll

windows7-x64

1

POS58/pos5...OR.dll

windows10-2004-x64

1

POS58/pos5...IB.dll

windows7-x64

1

POS58/pos5...IB.dll

windows10-2004-x64

1

POS58/pos5...RV.dll

windows7-x64

1

POS58/pos5...RV.dll

windows10-2004-x64

1

RWic.dll

windows7-x64

3

RWic.dll

windows10-2004-x64

3

SWind.dll

windows7-x64

3

SWind.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6806511d67081521c2ce19ef719e58b5_JaffaCakes118

  • Size

    5.7MB

  • MD5

    6806511d67081521c2ce19ef719e58b5

  • SHA1

    e556a533c7405f961922f308fafa576600f63575

  • SHA256

    d2488c3b9b1d9e7276b6db97870f5c07fcbcd6fe34e84bad1451bab306c0d08f

  • SHA512

    092bd6bb0aaffb4c7a9a3afc32235fd371cc063be68e9f653daa7ec3a1e0b5d7bb38b7fd2afdc417f2405c78d434a0e651c89525a1a9eeaaaa682f9058c2eed9

  • SSDEEP

    98304:H5p12EyRvuctreBB2668iKULmGt1P410Vz72/imlpMrDkLHOjDk4UJBjlZUgAzoJ:H5psNlr4g66AG341Y72/PpqDQH8QrB5x

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 6806511d67081521c2ce19ef719e58b5_JaffaCakes118
    .zip
  • mpkcd-v2011v1.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    41e025c99a5f731479582ce64a2527f4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/spltmp.bmp
  • API_COM.DLL
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ICard_ini.ini
  • License_chs.txt
  • Mwic_32.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    ea07118280c8f75a4be6c6c9e43aba65


    Headers

    Imports

    Exports

    Sections

  • POS58/pos58_2000_xp/I386/RASDD.DLL
    .dll windows:4 windows x86 arch:x86

    16b1ce6b969ef2e7aab46ebd16479a6a


    Headers

    Imports

    Sections

  • POS58/pos58_2000_xp/I386/RASDDUI.DLL
    .dll windows:4 windows x86 arch:x86

    3180822ddb6f5d103eda1274d2cb8af4


    Headers

    Imports

    Exports

    Sections

  • POS58/pos58_2000_xp/I386/RASDDUI.HLP
  • POS58/pos58_2000_xp/OEMSETUP.INF
  • POS58/pos58_2000_xp/POS58.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • POS58/pos58_2000_xp/pos58_2000_xp.rar
    .rar
  • I386/RASDD.DLL
    .dll windows:4 windows x86 arch:x86

    16b1ce6b969ef2e7aab46ebd16479a6a


    Headers

    Imports

    Sections

  • I386/RASDDUI.DLL
    .dll windows:4 windows x86 arch:x86

    3180822ddb6f5d103eda1274d2cb8af4


    Headers

    Imports

    Exports

    Sections

  • I386/RASDDUI.HLP
  • OEMSETUP.INF
  • POS58.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • readme.txt
  • POS58/pos58_2000_xp/readme.txt
  • POS58/pos58_win98/DMCOLOR.DLL
  • POS58/pos58_win98/ICONLIB.DLL
  • POS58/pos58_win98/POS58.drv
  • POS58/pos58_win98/UNIDRV.DLL
  • POS58/pos58_win98/UNIDRV.HLP
  • POS58/pos58_win98/pos58.inf
  • POS58/pos58_win98/readme.txt
  • RWic.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SWind.dll
    .dll windows:4 windows x86 arch:x86

    77472420329c28b3c0e01e2c5e741ed3


    Headers

    Imports

    Exports

    Sections

  • database/mpkc.dat
  • images/about.gif
    .gif
  • images/addsale.gif
    .gif
  • images/before.gif
    .gif
  • images/bmhz.gif
    .gif
  • images/caculatorlist.gif
    .gif
  • images/cgjh.gif
    .gif
  • images/changpsw.gif
    .gif
  • images/consumeinfo.gif
    .gif
  • images/costanalyse.gif
    .gif
  • images/datacopy.gif
    .gif
  • images/finacecheck.gif
    .gif
  • images/flhz.gif
    .gif
  • images/gysxx.gif
    .gif
  • images/historycost.gif
    .gif
  • images/kcuncheck.gif
    .gif
  • images/lszd.gif
    .gif
  • images/main.gif
    .gif
  • images/membermanage.gif
    .gif
  • images/membersaleinfo.gif
    .gif
  • images/productmanage.gif
    .gif
  • images/rjdj.gif
    .gif
  • images/rjqy.gif
    .gif
  • images/salecheck.gif
    .gif
  • images/saleoutsidemanage.gif
    .gif
  • images/symxcheck.gif
    .gif
  • images/systemsetting.gif
    .gif
  • images/xfhz.gif
    .gif
  • images/xygp.jpg
    .jpg
  • images/yingyeimg.gif
    .gif
  • images/yingyelist.gif
    .gif
  • images/zgdwin.gif
    .gif
  • mp.ini
  • mpkcd.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • mpsoftup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • mpsoftup.ini
  • readme.htm
    .html
  • skin.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • update.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ˵.txt
  • .url
    .url