General

  • Target

    683906aecd0d387d1252ca4f03c8f9f9_JaffaCakes118

  • Size

    13.2MB

  • MD5

    683906aecd0d387d1252ca4f03c8f9f9

  • SHA1

    6f27955661ccc160043c2af8b49262160620a5f7

  • SHA256

    34bd51e20686aafbb13cb98f4446803f692cc580ad073ec7265a0fe8c12b53f8

  • SHA512

    a21aa741eeb09d5408123543c966a38b44e5a88c6ac1d39efb0ea6b56bc2fa3e7ae53185cade932a7597945c0363e5bf0a819604919a316a48157867b0ec298c

  • SSDEEP

    393216:QbQQ/8pJBT52I6beSltu5n2s7d9dXFtfeExO2:QcQEpDUc77tXFEExO2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 683906aecd0d387d1252ca4f03c8f9f9_JaffaCakes118
    .rar
  • LIWord/LICENSE.TXT
  • LIWord/LIUpdate.exe
    .exe windows:5 windows x86 arch:x86

    ccce744a934a38d22cc6dd2a59062ec5


    Headers

    Imports

    Sections

  • LIWord/LIWord.exe
    .exe windows:5 windows x86 arch:x86

    9ce01d9fcb2588702db2a5d8594bf8fd


    Headers

    Imports

    Sections

  • LIWord/Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
  • LIWord/Microsoft.VC90.CRT/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LIWord/Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LIWord/QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    d4002c145ff7e9b8c954a724b20443b4


    Headers

    Imports

    Exports

    Sections

  • LIWord/QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    e1b4c3ecced4054df1f5eff57a671d67


    Headers

    Imports

    Exports

    Sections

  • LIWord/QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    4e769072b26ddecac6b6798b5f4c37ba


    Headers

    Imports

    Exports

    Sections

  • LIWord/QtSql4.dll
    .dll windows:5 windows x86 arch:x86

    83ed0482448dc6a445dd9e1a840de42c


    Headers

    Imports

    Exports

    Sections

  • LIWord/QtWebKit4.dll
    .dll windows:5 windows x86 arch:x86

    6e427a998048e88bb038e98139a1bb94


    Headers

    Imports

    Exports

    Sections

  • LIWord/QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    0310177415fb48bfa0492ca97ca5379a


    Headers

    Imports

    Exports

    Sections

  • LIWord/images/InterfaceArrowDown.png
    .png
  • LIWord/images/InterfaceArrowLeft.png
    .png
  • LIWord/images/InterfaceArrowRight.png
    .png
  • LIWord/images/InterfaceArrowUp.png
    .png
  • LIWord/images/LIWord.ico
  • LIWord/images/Learn_speak_hover.png
    .png
  • LIWord/images/Learn_speak_normal.png
    .png
  • LIWord/images/ScrollBar_Handle_Grab_Horizontal.png
    .png
  • LIWord/images/ScrollBar_Handle_Grab_Vertical.png
    .png
  • LIWord/images/Thumbs.db
  • LIWord/images/bg_area.png
    .png
  • LIWord/images/bg_main.png
    .png
  • LIWord/images/bg_study.png
    .png
  • LIWord/images/bg_tipbar.png
    .png
  • LIWord/images/br_area.png
    .png
  • LIWord/images/buttonGlow.png
    .png
  • LIWord/images/help.png
    .png
  • LIWord/images/learnoperate.qss
  • LIWord/images/learnquestion.qss
  • LIWord/images/main.qss
  • LIWord/images/main_aboutus.png
    .png
  • LIWord/images/main_exit.png
    .png
  • LIWord/images/main_sysmgr.png
    .png
  • LIWord/images/popbox_bg.png
    .png
  • LIWord/odata/course/217.db
  • LIWord/odata/course/218.db
  • LIWord/odata/course/219.db
  • LIWord/odata/course/220.db
  • LIWord/odata/course/categorycourse.db
  • LIWord/odata/fullword.db
  • LIWord/odata/learnskill.db
  • LIWord/phonon4.dll
    .dll windows:5 windows x86 arch:x86

    894d6e73f5a8c77dbe73043d308d6e61


    Headers

    Imports

    Exports

    Sections

  • LIWord/phonon_backend/phonon_ds94.dll
    .dll windows:5 windows x86 arch:x86

    12da1bcd56ec417fadbfc2c3d191fe72


    Headers

    Imports

    Exports

    Sections

  • LIWord/sqldrivers/qsqlite4.dll
    .dll windows:5 windows x86 arch:x86

    505f0c525fb7b39fdd2b89ed1f4c47a6


    Headers

    Imports

    Exports

    Sections

  • LIWord/udata/course/categorycourse.db
  • LIWord/unzip.exe
    .exe windows:4 windows x86 arch:x86

    a748a7b40b99ec291d54c001001fb23e


    Headers

    Imports

    Sections