General

  • Target

    8de52a6d9b2185edc2641b817af6ce11_JaffaCakes118

  • Size

    2.0MB

  • MD5

    8de52a6d9b2185edc2641b817af6ce11

  • SHA1

    82ee31d1d38e21f6c6df19e539eac54f0ae43bc4

  • SHA256

    1cfa34b65f7de912c7535c62c9310019fc4a73c78fc8d0a584f40868f3953243

  • SHA512

    dcf5d2e4f2b8c98b29541fcf7a87dbd4235af00f92f40179a31a6fa88610058364a6693d71ff22e7c71cfa9eda8a900be28f9ed10c52e1271c84120b7926dbcc

  • SSDEEP

    49152:xj3OpqmT06iUjuuZ+ujaHe+PObhnUPucXj5wnElNrJ:VkTji7EdjaHUbhouMrP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 8de52a6d9b2185edc2641b817af6ce11_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/google.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/t4_zh_cn.bmp
  • $PLUGINSDIR/toolbarcheck.dll
    .dll windows:4 windows x86 arch:x86

    728f7f310fd96af197075cfc7bbfc055


    Headers

    Imports

    Exports

    Sections

  • $TEMP/GoogleToolbarInstaller_zh-CN_signed.exe
    .exe windows:4 windows x86 arch:x86

    a49bef8fea93b9d5b78e9deac6b03dce


    Code Sign

    Headers

    Imports

    Sections

  • Encode.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • KwMusic.exe
    .exe windows:4 windows x86 arch:x86

    842b91b8fc28071b01d390f46a382511


    Headers

    Imports

    Sections

  • instpage.gif
    .gif