General

  • Target

    8a94390dd7798b51b2d1b6f856124c73_JaffaCakes118

  • Size

    1.0MB

  • MD5

    8a94390dd7798b51b2d1b6f856124c73

  • SHA1

    51562e7706264a6fb6aecc38cbf7da14a1e2ab11

  • SHA256

    0fc745578e50fe8672387e3b691b430ee4acc20f635adb3dfbd0516ae77d03f5

  • SHA512

    4551dbdcf29898b5e8caf177ca15a6c0a10ae940c67f62f3e0c229f1a3b4e4222b2021b5d0f9d0340a4d295485ec13439b7a505673264f07febbc14647d5d293

  • SSDEEP

    24576:/vdV1r0+4P50mVfAZddHsLSko/ucItGe8Q:/vNQ+4PxVwdHwDobI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 8 IoCs

Files

  • 8a94390dd7798b51b2d1b6f856124c73_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    ed83f419402bc3b83a08e3aaf8b5b5b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $R1/bdzhilan.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Baidu/AddressBar/AddressBar_Tmp/AddressBar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3b5b9821e3ceb6bf48e4ab67e12a6966


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMPLATES/installstat.exe
    .exe windows:4 windows x86 arch:x86

    88303b9e184caf0c30b164c35033709b


    Headers

    Imports

    Sections

  • $TEMPLATES/kksetup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • KDocks.exe
    .exe windows:5 windows x86 arch:x86

    e4e5cc00de12b083724d06b7c0f6f1f0


    Headers

    Imports

    Sections

  • icons/IE1.png
    .png
  • icons/IE2.png
    .png
  • icons/soft/ACDSee.png
    .png
  • icons/soft/CS.png
    .png
  • icons/soft/FXP.png
    .png
  • icons/soft/MSN.png
    .png
  • icons/soft/PS.png
    .png
  • icons/soft/QQ.png
    .png
  • icons/soft/RealOne.png
    .png
  • icons/soft/Winamp.png
    .png
  • icons/soft/Word.png
    .png
  • icons/soft/ǧǧ.png
    .png
  • icons/soft/.png
    .png
  • icons/soft/ṷ.png
    .png
  • icons/soft/Żʦ.png
    .png
  • icons/.png
    .png
  • icons/±.png
    .png
  • icons/.png
    .png
  • icons/ҵĵ.png
    .png
  • icons/ҵĵ.png
    .png
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $TEMPLATES/statistics.dll
    .dll windows:4 windows x86 arch:x86

    fcf8cbe10c29a0094ec18c74ddce8b31


    Headers

    Imports

    Exports

    Sections