_MainWndProc@16
_StubFileWrite@12
General
-
Target
729f7fff1e692527b5accca79b91581f_JaffaCakes118
-
Size
1.8MB
-
MD5
729f7fff1e692527b5accca79b91581f
-
SHA1
c29a043f4c2ada7fe7837180b2f09783568cd2bb
-
SHA256
d158f39f03d9c529ec554a47ef6e5a959025f3cde602ffd6f06b2b682cc19976
-
SHA512
6af326c7a82927a89d04f653857259ef9d9ee87d8402997410288df9d4227644c7f76eeb640675a5e59d940f6abb92c4c498128bcd52b5354ab156e89fe3ab29
-
SSDEEP
24576:KGqWn78DugqnoYuzkMMFrG6jXcbEXpRzD4Qo06dc3wWg6goFcUNYg+TRJ1ko+fZD:ZT78PcVuotjXcb4pi2ccgW1rqRJ1k5
Score
3/10
Malware Config
Signatures
-
Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 2 IoCs
Files
-
729f7fff1e692527b5accca79b91581f_JaffaCakes118
-
HB_Cedt370_ljh.EXE
e41c25ab7824b3df73334188c40518ae
Headers
Imports
Exports
Sections
-
cedt370r.exe
dae718ca7c0da2949ad685c2d593ec7a
Headers
Imports
Sections
-
$PLUGINSDIR/modern-header.bmp
-
NEWShellExt.dll
9b789b0051ea4c7ac3d092719e95a89f
Headers
Imports
Exports
Sections
-
cedt.dic
-
cedt.exe
8ca62a4a159d45e701c3e108f81d56f0
Headers
Imports
Sections
-
cedttype.ico
-
docs/calculator.html
-
docs/cmdline.html
-
docs/commands.html
-
docs/howtos.html
-
docs/images/pref_association.gif
-
docs/images/pref_backup.gif
-
docs/images/pref_colors.gif
-
docs/images/pref_file.gif
-
docs/images/pref_filters.gif
-
docs/images/pref_fonts.gif
-
docs/images/pref_general.gif
-
docs/images/pref_macros.gif
-
docs/images/pref_print_options.gif
-
docs/images/pref_syntax.gif
-
docs/images/pref_tools.gif
-
docs/images/pref_user_tools.gif
-
docs/images/pref_word_wrap.gif
-
docs/index.html
-
docs/preferences.html
-
docs/style.css
-
docs/syntaxfile.html
-
docs/tips.html
-
launch.exe
5c71aa8ca732163de5ea591c39a93aec
Headers
Imports
Sections
-
license.txt
-
link/extension.4gl
-
link/extension.a30
-
link/extension.a51
-
link/extension.a74
-
link/extension.abp
-
link/extension.ada
-
link/extension.adb
-
link/extension.ado
-
link/extension.ads
-
link/extension.ai
-
link/extension.as
-
link/extension.as2
-
link/extension.asa
-
link/extension.ash
-
link/extension.asl
-
link/extension.asm
-
link/extension.asn
-
link/extension.asp
-
link/extension.au3
-
link/extension.aut
-
link/extension.avp
-
link/extension.awk
-
link/extension.b
-
link/extension.baroc
-
link/extension.bas
-
link/extension.bash
-
link/extension.bat
-
link/extension.bdf
-
link/extension.bdh
-
link/extension.brp
-
link/extension.bsh
-
link/extension.c
-
link/extension.c++
-
link/extension.cc
-
link/extension.cds
-
link/extension.cfm
-
link/extension.cg
-
link/extension.cgi
-
link/extension.ch
-
link/extension.chf
-
link/extension.chl
-
link/extension.chs
-
link/extension.ci
-
link/extension.cisco
-
link/extension.cl
-
link/extension.clisp
-
link/extension.cln
-
link/extension.cls
-
link/extension.cmd
-
link/extension.cob
-
link/extension.conf
-
link/extension.cpp
-
link/extension.cs
-
link/extension.csl
-
link/extension.css
-
link/extension.cxx
-
link/extension.d
-
link/extension.dat
-
link/extension.dd
-
link/extension.def
-
link/extension.dg
-
link/extension.dmi
-
link/extension.dmo
-
link/extension.dms
-
link/extension.do
-
link/extension.dpk
-
link/extension.dpr
-
link/extension.dsp
-
link/extension.dtml
-
link/extension.dxl
-
link/extension.e
-
link/extension.edf
-
link/extension.edif
-
link/extension.edn
-
link/extension.edo
-
link/extension.el
-
link/extension.esp
-
link/extension.ew
-
link/extension.ex
-
link/extension.exp
-
link/extension.ext
-
link/extension.exw
-
link/extension.f
-
link/extension.f77
-
link/extension.f90
-
link/extension.f95
-
link/extension.fasm
-
link/extension.fmt
-
link/extension.for
-
link/extension.form
-
link/extension.frm
-
link/extension.ftn
-
link/extension.gc
-
link/extension.gui
-
link/extension.h
-
link/extension.h++
-
link/extension.hh
-
link/extension.hla
-
link/extension.hlsl
-
link/extension.hpp
-
link/extension.hs
-
link/extension.hti
-
link/extension.htm
-
link/extension.html
-
link/extension.htp
-
link/extension.htt
-
link/extension.hxx
-
link/extension.idl
-
link/extension.il
-
link/extension.inc
-
link/extension.inf
-
link/extension.ini
-
link/extension.jal
-
link/extension.jav
-
link/extension.java
-
link/extension.jbase
-
link/extension.jhtml
-
link/extension.js
-
link/extension.jsp
-
link/extension.key
-
link/extension.kix
-
link/extension.ksh
-
link/extension.l
-
link/extension.lgo
-
link/extension.lib
-
link/extension.limbo
-
link/extension.lingo
-
link/extension.lisp
-
link/extension.lng
-
link/extension.lsp
-
link/extension.lss
-
link/extension.ltp
-
link/extension.lua
-
link/extension.m
-
link/extension.mac
-
link/extension.mak
-
link/extension.maki
-
link/extension.maple
-
link/extension.mc
-
link/extension.mcr
-
link/extension.mdl
-
link/extension.mdx
-
link/extension.mel
-
link/extension.mf
-
link/extension.midl
-
link/extension.mips
-
link/extension.ml
-
link/extension.mli
-
link/extension.mod
-
link/extension.mp
-
link/extension.ms
-
link/extension.msc
-
link/extension.msf
-
link/extension.mso
-
link/extension.mv
-
link/extension.nasm
-
link/extension.nc
-
link/extension.nsi
-
link/extension.objc
-
link/extension.opr
-
link/extension.p
-
link/extension.pas
-
link/extension.paw
-
link/extension.pb
-
link/extension.pc
-
link/extension.pde
-
link/extension.perl
-
link/extension.pew
-
link/extension.phd
-
link/extension.php
-
link/extension.php3
-
link/extension.php4
-
link/extension.phtml
-
link/extension.pkg
-
link/extension.pl
-
link/extension.pm
-
link/extension.pml
-
link/extension.pmlfnc
-
link/extension.pmlfrm
-
link/extension.pmlobj
-
link/extension.poc
-
link/extension.pod
-
link/extension.pov
-
link/extension.prg
-
link/extension.prj
-
link/extension.proc
-
link/extension.ps
-
link/extension.psl
-
link/extension.py
-
link/extension.python
-
link/extension.r
-
link/extension.rb
-
link/extension.rc
-
link/extension.rex
-
link/extension.rexx
-
link/extension.rls
-
link/extension.rpt
-
link/extension.rte
-
link/extension.ruby
-
link/extension.rul
-
link/extension.run
-
link/extension.rwx
-
link/extension.rx
-
link/extension.s
-
link/extension.sas
-
link/extension.sci
-
link/extension.script
-
link/extension.sh
-
link/extension.shtm
-
link/extension.shtml
-
link/extension.sl
-
link/extension.sma
-
link/extension.spc
-
link/extension.sps
-
link/extension.sql
-
link/extension.sqr
-
link/extension.src
-
link/extension.sty
-
link/extension.tcl
-
link/extension.tdf
-
link/extension.tdy
-
link/extension.tea
-
link/extension.tex
-
link/extension.tlc
-
link/extension.tpc
-
link/extension.tpl
-
link/extension.tsl
-
link/extension.ttl
-
link/extension.uc
-
link/extension.v
-
link/extension.vb
-
link/extension.vbp
-
link/extension.vbs
-
link/extension.vhd
-
link/extension.vhdl
-
link/extension.vho
-
link/extension.vo
-
link/extension.vqm
-
link/extension.vsc
-
link/extension.vw
-
link/extension.vxml
-
link/extension.w
-
link/extension.wbt
-
link/extension.wish
-
link/extension.wks
-
link/extension.wml
-
link/extension.wrl
-
link/extension.xlg
-
link/extension.xml
-
link/extension.xsd
-
link/extension.xsl
-
link/extension.xslt
-
link/extension.xul
-
link/extension.z80
-
link/extension.zsh
-
link/firstline.arbvp
-
link/firstline.bash
-
link/firstline.chill
-
link/firstline.expect
-
link/firstline.gui4cli
-
link/firstline.hlsl
-
link/firstline.ksh
-
link/firstline.perl
-
link/firstline.python
-
link/firstline.rebol
-
link/pathname.html
-
link/pathname.make
-
notepad.exe
649cec703f9305847ab6395279a4d3c2
Headers
Imports
Sections
-
readme.txt
-
schemes/schemes.txt
-
spec/68000-asm.key
-
spec/68000-asm.spc
-
spec/69r000-asm.key
-
spec/69r000-asm.spc
-
spec/8051-asm.key
-
spec/8051-asm.spc
-
spec/abap.key
-
spec/abap.spc
-
spec/actionscript.key
-
spec/actionscript.spc
-
spec/ada.key
-
spec/ada.spc
-
spec/admb.key
-
spec/admb.spc
-
spec/altera-tdf.key
-
spec/altera-tdf.spc
-
spec/amada-nc.key
-
spec/amada-nc.spc
-
spec/ampl.key
-
spec/ampl.spc
-
spec/ansys-apdl.key
-
spec/ansys-apdl.spc
-
spec/apache-conf.key
-
spec/apache-conf.spc
-
spec/apic-gis.key
-
spec/apic-gis.spc
-
spec/arbvp10.key
-
spec/arbvp10.spc
-
spec/asn1.key
-
spec/asn1.spc
-
spec/asp.key
-
spec/asp.spc
-
spec/autoit.key
-
spec/autoit.spc
-
spec/autolisp.key
-
spec/autolisp.spc
-
spec/awk.key
-
spec/awk.spc
-
spec/baan-4gl.key
-
spec/baan-4gl.spc
-
spec/bash.key
-
spec/bash.spc
-
spec/basic.key
-
spec/basic.spc
-
spec/batch.key
-
spec/batch.spc
-
spec/cedt-project.key
-
spec/cedt-project.spc
-
spec/ch.key
-
spec/ch.spc
-
spec/chill.key
-
spec/chill.spc
-
spec/cisco.key
-
spec/cisco.spc
-
spec/citect.key
-
spec/citect.spc
-
spec/clipper.key
-
spec/clipper.spc
-
spec/cobol.key
-
spec/cobol.spc
-
spec/coldfusion.key
-
spec/coldfusion.spc
-
spec/corba-idl.key
-
spec/corba-idl.spc
-
spec/cplusplus.key
-
spec/cplusplus.spc
-
spec/csharp.key
-
spec/csharp.spc
-
spec/csl.key
-
spec/csl.spc
-
spec/css.key
-
spec/css.spc
-
spec/d.key
-
spec/d.spc
-
spec/dataflex.key
-
spec/dataflex.spc
-
spec/directx-fx.key
-
spec/directx-fx.spc
-
spec/directx-mesh.key
-
spec/directx-mesh.spc
-
spec/dmis.key
-
spec/dmis.spc
-
spec/doors-dxl.key
-
spec/doors-dxl.spc
-
spec/dsp-asm.key
-
spec/dsp-asm.spc
-
spec/dspic-asm.key
-
spec/dspic-asm.spc
-
spec/dtml.key
-
spec/dtml.spc
-
spec/dynamicc.key
-
spec/dynamicc.spc
-
spec/edif.key
-
spec/edif.spc
-
spec/eiffel.key
-
spec/eiffel.spc
-
spec/escapade.key
-
spec/escapade.spc
-
spec/euphoria.key
-
spec/euphoria.spc
-
spec/expect.key
-
spec/expect.spc
-
spec/extbatch.key
-
spec/extbatch.spc
-
spec/fivewin.key
-
spec/fivewin.spc
-
spec/flat-asm.key
-
spec/flat-asm.spc
-
spec/flexpde.key
-
spec/flexpde.spc
-
spec/form.key
-
spec/form.spc
-
spec/fortran77.key
-
spec/fortran77.spc
-
spec/fortran90.key
-
spec/fortran90.spc
-
spec/gnu-asm.key
-
spec/gnu-asm.spc
-
spec/gui4cli.key
-
spec/gui4cli.spc
-
spec/haskell.key
-
spec/haskell.spc
-
spec/hla.key
-
spec/hla.spc
-
spec/hlsl.key
-
spec/hlsl.spc
-
spec/html.key
-
spec/html.spc
-
spec/htp.key
-
spec/htp.spc
-
spec/inform.key
-
spec/inform.spc
-
spec/informix-4gl.key
-
spec/informix-4gl.spc
-
spec/ini.key
-
spec/ini.spc
-
spec/installshield.key
-
spec/installshield.spc
-
spec/jal.key
-
spec/jal.spc
-
spec/java.key
-
spec/java.spc
-
spec/javascript.key
-
spec/javascript.spc
-
spec/jbase.key
-
spec/jbase.spc
-
spec/jsp.key
-
spec/jsp.spc
-
spec/keywords.key
-
spec/keywords.spc
-
spec/kixtart.key
-
spec/kixtart.spc
-
spec/korn-shell.key
-
spec/korn-shell.spc
-
spec/langspec.key
-
spec/langspec.spc
-
spec/latex.key
-
spec/latex.spc
-
spec/lc2-asm.key
-
spec/lc2-asm.spc
-
spec/limbo.key
-
spec/limbo.spc
-
spec/lingo.key
-
spec/lingo.spc
-
spec/lisp.key
-
spec/lisp.spc
-
spec/lotusscript.key
-
spec/lotusscript.spc
-
spec/lua.key
-
spec/lua.spc
-
spec/makefile.key
-
spec/makefile.spc
-
spec/makiscript.key
-
spec/makiscript.spc
-
spec/maple.key
-
spec/maple.spc
-
spec/matlab.key
-
spec/matlab.spc
-
spec/matrixx-tpl.key
-
spec/matrixx-tpl.spc
-
spec/matrixx.key
-
spec/matrixx.spc
-
spec/maxima.key
-
spec/maxima.spc
-
spec/maxscript.key
-
spec/maxscript.spc
-
spec/mdl.key
-
spec/mdl.spc
-
spec/mdx.key
-
spec/mdx.spc
-
spec/mel.key
-
spec/mel.spc
-
spec/metafont.key
-
spec/metafont.spc
-
spec/metapost.key
-
spec/metapost.spc
-
spec/midl.key
-
spec/midl.spc
-
spec/mips.key
-
spec/mips.spc
-
spec/mirc.key
-
spec/mirc.spc
-
spec/mit-a30.key
-
spec/mit-a30.spc
-
spec/mit-a74.key
-
spec/mit-a74.spc
-
spec/mit-asm.key
-
spec/mit-asm.spc
-
spec/mobilec.key
-
spec/mobilec.spc
-
spec/modula-2.key
-
spec/modula-2.spc
-
spec/msw-logo.key
-
spec/msw-logo.spc
-
spec/mv-basic.key
-
spec/mv-basic.spc
-
spec/mysql.key
-
spec/mysql.spc
-
spec/netwide-asm.key
-
spec/netwide-asm.spc
-
spec/nsis.key
-
spec/nsis.spc
-
spec/nvidia-cg.key
-
spec/nvidia-cg.spc
-
spec/objective-c.key
-
spec/objective-c.spc
-
spec/ocaml.key
-
spec/ocaml.spc
-
spec/octave.key
-
spec/octave.spc
-
spec/openroad.key
-
spec/openroad.spc
-
spec/osdd.key
-
spec/osdd.spc
-
spec/pascal.key
-
spec/pascal.spc
-
spec/pawl.key
-
spec/pawl.spc
-
spec/pdms-pml.key
-
spec/pdms-pml.spc
-
spec/peoplesoft-sqr.key
-
spec/peoplesoft-sqr.spc
-
spec/perl.key
-
spec/perl.spc
-
spec/philips-hdl.key
-
spec/philips-hdl.spc
-
spec/php.key
-
spec/php.spc
-
spec/pic-asm.key
-
spec/pic-asm.spc
-
spec/plsql.key
-
spec/plsql.spc
-
spec/pocoscript.key
-
spec/pocoscript.spc
-
spec/pod.key
-
spec/pod.spc
-
spec/postscript.key
-
spec/postscript.spc
-
spec/pov-ray.key
-
spec/pov-ray.spc
-
spec/proc.key
-
spec/proc.spc
-
spec/progress-4gl.key
-
spec/progress-4gl.spc
-
spec/prolog.key
-
spec/prolog.spc
-
spec/psl.key
-
spec/psl.spc
-
spec/purebasic.key
-
spec/purebasic.spc
-
spec/python.key
-
spec/python.spc
-
spec/r.key
-
spec/r.spc
-
spec/rapidq-basic.key
-
spec/rapidq-basic.spc
-
spec/rebol.key
-
spec/rebol.spc
-
spec/renderman.key
-
spec/renderman.spc
-
spec/rexx.key
-
spec/rexx.spc
-
spec/rsi-idl.key
-
spec/rsi-idl.spc
-
spec/rtcw-script.key
-
spec/rtcw-script.spc
-
spec/rtcw-script.txt
-
spec/rte.key
-
spec/rte.spc
-
spec/rtpi.key
-
spec/rtpi.spc
-
spec/ruby.key
-
spec/ruby.spc
-
spec/rwx.key
-
spec/rwx.spc
-
spec/sas.key
-
spec/sas.spc
-
spec/scilab.key
-
spec/scilab.spc
-
spec/silkperformer.key
-
spec/silkperformer.spc
-
spec/siod.key
-
spec/siod.spc
-
spec/skill.key
-
spec/skill.spc
-
spec/small.key
-
spec/small.spc
-
spec/spss.key
-
spec/spss.spc
-
spec/stata.key
-
spec/stata.spc
-
spec/tads.key
-
spec/tads.spc
-
spec/tcltk.key
-
spec/tcltk.spc
-
spec/tea.key
-
spec/tea.spc
-
spec/teradata-sql.key
-
spec/teradata-sql.spc
-
spec/teraterm.key
-
spec/teraterm.spc
-
spec/tidy-conf.key
-
spec/tidy-conf.spc
-
spec/tivoli-baroc.key
-
spec/tivoli-baroc.spc
-
spec/tivoli-class.key
-
spec/tivoli-class.spc
-
spec/tivoli-logfile.key
-
spec/tivoli-logfile.spc
-
spec/tivoli-rules.key
-
spec/tivoli-rules.spc
-
spec/tlc.key
-
spec/tlc.spc
-
spec/tms320c6x-asm.key
-
spec/tms320c6x-asm.spc
-
spec/tsql.key
-
spec/tsql.spc
-
spec/unrealscript.key
-
spec/unrealscript.spc
-
spec/vbscript.key
-
spec/vbscript.spc
-
spec/verilog.key
-
spec/verilog.spc
-
spec/vhdl.key
-
spec/vhdl.spc
-
spec/virtools-script.key
-
spec/virtools-script.spc
-
spec/visualbasic.key
-
spec/visualbasic.spc
-
spec/vrml.key
-
spec/vrml.spc
-
spec/vxml.key
-
spec/vxml.spc
-
spec/winbatch.key
-
spec/winbatch.spc
-
spec/winres-script.key
-
spec/winres-script.spc
-
spec/winrunner-tsl.key
-
spec/winrunner-tsl.spc
-
spec/wml.key
-
spec/wml.spc
-
spec/x86-asm.key
-
spec/x86-asm.spc
-
spec/xml.key
-
spec/xml.spc
-
spec/xsd.key
-
spec/xsd.spc
-
spec/xsl.key
-
spec/xsl.spc
-
spec/xslt.key
-
spec/xslt.spc
-
spec/xul.key
-
spec/xul.spc
-
spec/yabasic.key
-
spec/yabasic.spc
-
spec/z80-asm.key
-
spec/z80-asm.spc
-
spec/zzt.key
-
spec/zzt.spc
-
template/hello world applet.java
-
template/hello world document.html
-
template/hello world document.tex
-
template/hello world document.wml
-
template/hello world program.ada
-
template/hello world program.c
-
template/hello world program.cpp
-
template/hello world program.for
-
template/hello world program.java
-
template/hello world program.pl
-
template/hello world program.psl
-
template/hello world program.src
-
tools/tools.txt
-
uninstall.exe
dae718ca7c0da2949ad685c2d593ec7a
Headers
Imports
Sections
-
$PLUGINSDIR/modern-header.bmp
-
user.dic
-
下载说明.htm
-
汉化说明.txt