Overview

overview

7

Static

static

3

858c56ce1a...18.exe

windows7-x64

7

858c56ce1a...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ps.dll

windows7-x64

3

$PLUGINSDI...ps.dll

windows10-2004-x64

3

ActionUP.exe

windows7-x64

6

ActionUP.exe

windows10-2004-x64

6

AutoDetect.exe

windows7-x64

6

AutoDetect.exe

windows10-2004-x64

6

CleanCenter.exe

windows7-x64

6

CleanCenter.exe

windows10-2004-x64

7

CleanFav.exe

windows7-x64

3

CleanFav.exe

windows10-2004-x64

3

CleanShortCuts.exe

windows7-x64

3

CleanShortCuts.exe

windows10-2004-x64

3

KBClean.exe

windows7-x64

3

KBClean.exe

windows10-2004-x64

3

Local.htm

windows7-x64

3

Local.htm

windows10-2004-x64

3

MyUpdate.exe

windows7-x64

3

MyUpdate.exe

windows10-2004-x64

3

NewVersion.html

windows7-x64

3

NewVersion.html

windows10-2004-x64

3

RegistryDoctor.exe

windows7-x64

3

RegistryDoctor.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    858c56ce1a988a51044d3d4fab6429cd_JaffaCakes118

  • Size

    1.5MB

  • MD5

    858c56ce1a988a51044d3d4fab6429cd

  • SHA1

    644faaae57ff71d788b4a80e9a4fcbc26052e079

  • SHA256

    d0b14a44a6596e78cac30eadc670264ee17dbc060278e5f0b70a6d1a2556558c

  • SHA512

    49ff188071844ef59e8ea745a4a434a92581adf6271c6b403b94b958061a4e04fb1800610865187b396c9e39ea89aa08a2d3aa35ccd4010aaf42370c89710064

  • SSDEEP

    24576:iz23UST2e8VBpIaoxN1O8bks8AmFLAiMEvJee2R8RBAxuIwmzuo7FJ+38/dRBjdN:9392tfqxGSt8lLGe2+RWuIwmKoRJh/db

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • 858c56ce1a988a51044d3d4fab6429cd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ToolTips.dll
    .dll windows:4 windows x86 arch:x86

    04338c58e26f4ac6ae89608ac6276429


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Action.inf
  • ActionUP.exe
    .exe windows:4 windows x86 arch:x86

    36d19efdcb373fc81ccbd035dfec0258


    Headers

    Imports

    Sections

  • AutoDetect.exe
    .exe windows:4 windows x86 arch:x86

    bbb7a5fc93196082496d02d75a863919


    Headers

    Imports

    Sections

  • CleanCenter.exe
    .exe windows:4 windows x86 arch:x86

    80a0ab1268cc66c356c396346e5410b0


    Headers

    Imports

    Sections

  • CleanFav.exe
    .exe windows:4 windows x86 arch:x86

    d0e3035b007b9d4ba48a3de8d49cdcef


    Headers

    Imports

    Sections

  • CleanPlugin/ACDSee ʷ¼
  • CleanPlugin/AbsoluteFTP ʷ¼
  • CleanPlugin/Acrobat Reader 5 ʷ¼
  • CleanPlugin/Acrobat Reader 6 ʷ¼
  • CleanPlugin/Ad-aware 6 ʷ¼
  • CleanPlugin/Adaptec Easy CD Creator ʷ¼
  • CleanPlugin/Adobe Photoshop 6.0 ʷ¼
  • CleanPlugin/Adobe Photoshop 7.0 ʷ¼
  • CleanPlugin/BitTorrent滺
  • CleanPlugin/Bitcometؼ¼
  • CleanPlugin/Borland Delphi v7 ʷ¼
  • CleanPlugin/CuteFTP ʷ¼
  • CleanPlugin/Disk Explorer Professional 3 ʷ¼
  • CleanPlugin/Diskeeper 5.0 ʷ¼
  • CleanPlugin/DivX Player ʷ¼
  • CleanPlugin/Download Accelerator ʷ¼
  • CleanPlugin/Easy CD ¼¼
  • CleanPlugin/Ebay Toolbar ʷ¼
  • CleanPlugin/Eͨ
  • CleanPlugin/FlashFXPļ
  • CleanPlugin/Foxmail 
  • CleanPlugin/GetRight ʷ¼
  • CleanPlugin/Google Deskbar ʷ¼
  • CleanPlugin/Google Toolbar ʷ¼
  • CleanPlugin/Graphic Workshop Pro ʷ¼
  • CleanPlugin/HLSWϷ̨¼
  • CleanPlugin/HyperSnap 5 ͼ¼
  • CleanPlugin/ICQ 2003a ʷ¼
  • CleanPlugin/KMPlayer
  • CleanPlugin/LeapFTP 2.6 ʷ¼
  • CleanPlugin/MSN Messenger ʷ¼
  • CleanPlugin/MSN Toolbar ʷ¼
  • CleanPlugin/Macromedia Dreamweaver MX ʷ¼
  • CleanPlugin/Macromedia Firework MX ʷ¼
  • CleanPlugin/Macromedia Flash MX ʷ¼
  • CleanPlugin/McAfee Virus Scan() ʷ¼
  • CleanPlugin/Microsoft Imaging ʷ¼
  • CleanPlugin/Microsoft Netmeeting ʷ¼
  • CleanPlugin/Microsoft Office 2000 ʷ¼
  • CleanPlugin/Microsoft Office 97 ʷ¼
  • CleanPlugin/Microsoft Office XP ʷ¼
  • CleanPlugin/Microsoft Photo Editor 3.0 ʷ¼
  • CleanPlugin/Microsoft Publisher 2000 ʷ¼
  • CleanPlugin/Microsoft Word 2000 ʷ¼
  • CleanPlugin/Microsoft Word Backup Files ʷ¼
  • CleanPlugin/NetAnts ʷ¼
  • CleanPlugin/NetCaptor ʷ¼
  • CleanPlugin/Norton Anti-Virusŵɱ ʷ¼
  • CleanPlugin/Norton Firewalŵٷǽ ʷ¼
  • CleanPlugin/Norton Internet Securityŵٻǽ ʷ¼
  • CleanPlugin/Outlook Express 5,6 ʷ¼
  • CleanPlugin/PhotoDraw 2000 ʷ¼
  • CleanPlugin/PhotoImpact Viewer 4.0 ʷ¼
  • CleanPlugin/PhotoImpact(Ӳ) ʷ¼
  • CleanPlugin/PowerDVD ʷ¼
  • CleanPlugin/QQ Զʷ¼
  • CleanPlugin/QQ2004 ʷ
  • CleanPlugin/QQ2005 ʷ
  • CleanPlugin/QQGame2004 Ϸ
  • CleanPlugin/QQGame2005 Ϸ
  • CleanPlugin/QQϷʷ¼
  • CleanPlugin/RealNetworks Real Download ʷ¼
  • CleanPlugin/RealOne & RealPlayer ʷ¼
  • CleanPlugin/Roxio Easy CD Creator ʷ¼
  • CleanPlugin/Ulead GIF Animator ʷ¼
  • CleanPlugin/Ulead Photo Express ʷ¼
  • CleanPlugin/UltraEdit ʷ¼
  • CleanPlugin/WinAce 2. ʷ¼
  • CleanPlugin/WinISO ̾¼
  • CleanPlugin/WinRAR 3.0 ʷ¼
  • CleanPlugin/WinZip 9.0-9.1 ʷ¼
  • CleanPlugin/Winamp ʷ¼
  • CleanPlugin/Windows XP Ԥļ
  • CleanPlugin/Windows ӳб
  • CleanPlugin/Windows־ļ
  • CleanPlugin/Yahoo! Messenger ʷ¼
  • CleanPlugin/Yahoo! Player ʷ¼
  • CleanPlugin/Zone Alarm ǽ־
  • CleanPlugin/Ѹ׹滺
  • CleanPlugin/Ӱʹ ļ
  • CleanPlugin/
  • CleanPlugin/Ӱ¼
  • CleanPlugin/ؾؼ¼
  • CleanPlugin/⹤¼
  • CleanPlugin/ֺ
  • CleanPlugin/ǽ־
  • CleanPlugin/ʿ쳵FlashGet ʷ¼
  • CleanPlugin/UC
  • CleanShortCuts.exe
    .exe windows:4 windows x86 arch:x86

    6129ff200c772e5ff3e05c01d8ef98bb


    Headers

    Imports

    Sections

  • CleanShortCuts.ini
  • KBClean.exe
    .exe windows:4 windows x86 arch:x86

    f1927cedbaea6e93ee20ffca0b0f3df0


    Headers

    Imports

    Sections

  • Local.htm
  • MainCon.ini
  • MyUpdate.exe
    .exe windows:4 windows x86 arch:x86

    f3f54229ba80b29626a635e6f6549888


    Headers

    Imports

    Sections

  • NewVersion.ini
    .html
  • RegistryDoctor.exe
    .exe windows:4 windows x86 arch:x86

    7d55229946e36f591c9617a260e313ad


    Headers

    Imports

    Sections

  • RegistryDoctor.ini
  • Resource.ini
  • Skin.ssk
  • SkinPlusPlus.dll
    .dll windows:4 windows x86 arch:x86

    598ae977394a6b93fbf9769d688859f0


    Headers

    Imports

    Exports

    Sections

  • TrackClean.exe
    .exe windows:4 windows x86 arch:x86

    e4a130f42319f84ce62c99ec1fa44c45


    Headers

    Imports

    Sections

  • TrackClean.ini
  • Unzip.exe
    .exe windows:4 windows x86 arch:x86

    e791bd94ae9d9fa3ba03d79cea7f12fd


    Headers

    Imports

    Sections

  • UpdateInfo.INI
  • UpdateUrl.ini
  • VistaKBClr.exe
    .exe windows:4 windows x86 arch:x86

    337d802628dfabc395d96c59f3d2ce3a


    Headers

    Imports

    Sections

  • WjfClean.exe
    .exe windows:4 windows x86 arch:x86

    165249057509573a9769bc09b5ae393f


    Headers

    Imports

    Sections

  • WjfClean.ini
  • ZFilters.ini
  • ZeroRemover.exe
    .exe windows:4 windows x86 arch:x86

    c0d77bc3206364bd8b761fc0fcc8403f


    Headers

    Imports

    Sections

  • license.TXT
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp