General

  • Target

    73c8487851765f8a27107b22c837a20e_JaffaCakes118

  • Size

    479KB

  • MD5

    73c8487851765f8a27107b22c837a20e

  • SHA1

    17668401baee2b8bb8142285e3064a44e48933ef

  • SHA256

    442ab184995f21fb50505729af59376deeb9689e25ab000ab3fd829c27d49995

  • SHA512

    4f8c61fc14664b56c2d56f4c540154fb0c217dc140cd291ae7e39414f805068d82b07c03c29dd2637dc512fa47a857b7599334a4a7b70a8dd2f316596fd8c1f9

  • SSDEEP

    12288:w1vgEL2mvvCrIl7sOb6er9UU/0VA/9eiiyJun4yV:wWE1CrIlpv9/0Ve9Liy4n3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 73c8487851765f8a27107b22c837a20e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • BaiduTool.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • IrisSkin2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Pf_vista1_2.ssk
  • account.txt
  • baidujpg.jpg
    .png
  • hong.ico
  • huang.ico
  • lan.ico
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • yanzhema.jpg
    .jpg
  • ʹñض.txt