General

  • Target

    a3e0068898eff645b0ecb95bf27d11e5_JaffaCakes118

  • Size

    4.1MB

  • MD5

    a3e0068898eff645b0ecb95bf27d11e5

  • SHA1

    6faf215479a7975fd3364108eb55cd4d7ac9821d

  • SHA256

    2147322197323cd5aea9bdfe92ca6da4e071dc196880a7bf531d2e53a12515dc

  • SHA512

    cf5ecc82773464782ec9ab46ae57ff766bff978e8855be296d92f08de6cc2b21e778f8ea63d951ef9afbecf46bc9ae316f565dda450ca3878960cc908c437135

  • SSDEEP

    98304:tFEYiMuYUDTCwC1NvNwxmQk5CcoRygb2OzSCInzWT8SfI0U1uqNh:YYnUDjC1EcH0lb2OzSl8l6kkh

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 48 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • a3e0068898eff645b0ecb95bf27d11e5_JaffaCakes118
    .rar
  • r-install-cn.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • Icons/AnswerCall.ico
  • Icons/EndCall.ico
  • Icons/ICQ/328755272.jpg
    .jpg
  • Icons/IM.ico
  • Icons/NoPhoto.jpg
    .jpg
  • Icons/bbacka.bmp
  • Icons/bbackb.bmp
  • Icons/bbackc.bmp
  • Icons/bbackd.bmp
  • Icons/bbacke.bmp
  • Icons/mic.ico
  • Icons/micoff.ico
  • Icons/proto_AIM.dll
    .dll windows:4 windows x86 arch:x86

    fc7a72a295f39d0f4e65ddd0f8f329b6


    Headers

    Imports

    Sections

  • Icons/proto_GG.dll
    .dll windows:4 windows x86 arch:x86

    f04a65bd7cd4c32b29fadb113138f1cc


    Headers

    Imports

    Sections

  • Icons/proto_GOOGLE.dll
    .dll windows:4 windows x86 arch:x86

    fc7a72a295f39d0f4e65ddd0f8f329b6


    Headers

    Imports

    Sections

  • Icons/proto_ICQ.dll
    .dll windows:4 windows x86 arch:x86

    fc7a72a295f39d0f4e65ddd0f8f329b6


    Headers

    Imports

    Sections

  • Icons/proto_IRC.dll
    .dll windows:4 windows x86 arch:x86

    fc7a72a295f39d0f4e65ddd0f8f329b6


    Headers

    Imports

    Sections

  • Icons/proto_MSN.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Icons/proto_SKYPE.dll
    .dll windows:4 windows x86 arch:x86

    fc7a72a295f39d0f4e65ddd0f8f329b6


    Headers

    Imports

    Sections

  • Icons/proto_YAHOO.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Icons/r.ico
  • Icons/spk.ico
  • Icons/spkoff.ico
  • Icons/stataway.ico
  • Icons/statdnd.ico
  • Icons/statfreetochat.ico
  • Icons/statinvisible.ico
  • Icons/statlunch.ico
  • Icons/statnotavailable.ico
  • Icons/statocupied.ico
  • Icons/statoffline.ico
  • Icons/statonline.ico
  • Icons/statonphone.ico
  • Icons/tabsrmm_icons.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Language/langpack_chinese.txt
  • Language/langpack_english.txt
  • MessageWave.exe
    .exe windows:4 windows x86 arch:x86

    7ce9f63b0fcde35e9c97e846651d05ae


    Headers

    Imports

    Sections

  • Plugins/Plugins_niu/AIM.dll
    .dll windows:4 windows x86 arch:x86

    abaee9b531f3455a24185003e5617c6f


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/ICQ.dll
    .dll windows:4 windows x86 arch:x86

    72c770d202385ba869e19517d20c8758


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/SBridge.dll
    .dll windows:4 windows x86 arch:x86

    6f378c075fa90280fbf2959a35f95e72


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/UninstallW.exe
    .exe windows:4 windows x86 arch:x86

    62d9fb869d859c82fb6d284ac6e67cd2


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/VoIPCall.dll
    .dll windows:4 windows x86 arch:x86

    c2b82006c922e6248c54e303a5d554d1


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/Yahoo.dll
    .dll windows:4 windows x86 arch:x86

    fbb532025ca3c707a0ba7914cded026e


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/clist_classic.dll
    .dll windows:4 windows x86 arch:x86

    ef7518b7a82b52782045cab9f94d7f82


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/gmailm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Plugins_niu/google.dll
    .dll windows:4 windows x86 arch:x86

    f580195b0bd4da605acdd09750141fa2


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/invite.dll
    .dll windows:4 windows x86 arch:x86

    4b540ff18b96ef387aab1c910bfcfbd0


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/jabber.dll
    .dll windows:4 windows x86 arch:x86

    ef9e48f6c747bb224844478a63f55a32


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/msn.dll
    .dll windows:4 windows x86 arch:x86

    ec0c16687d505be5b2ec20b878c920bf


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/png2dib.dll
    .dll windows:4 windows x86 arch:x86

    224a408faa3e48f780387ee4505791d8


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/profile.dat
  • Plugins/Plugins_niu/smileyadd.dll
    .dll windows:4 windows x86 arch:x86

    1dfd68d1d6ad771bf5617ae147c6b1bc


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/srmm.dll
    .dll windows:4 windows x86 arch:x86

    652349dfced7ded921a5b13b35e6bd53


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/tabSRMM.dll
    .dll windows:4 windows x86 arch:x86

    517ae6d3ddd1d2ae8c0f6905b67115b4


    Headers

    Imports

    Exports

    Sections

  • Plugins/Plugins_niu/uninsW.bat
  • Plugins/Plugins_niu/uninsW98.bat
  • Plugins/Plugins_niu/uninsWV.bat
  • Plugins/Plugins_niu/uninsWmove.bat
  • Plugins/PopUp.dll
    .dll windows:4 windows x86 arch:x86

    e65567e859d07de12cc0ed172a553659


    Headers

    Imports

    Exports

    Sections

  • Plugins/PopUp/modern/back/mono.bmp
  • Plugins/PopUp/modern/frame/cb.bmp
  • Plugins/PopUp/modern/frame/ct.bmp
  • Plugins/PopUp/modern/frame/ct_bevel.bmp
  • Plugins/PopUp/modern/frame/lb.bmp
  • Plugins/PopUp/modern/frame/lc.bmp
  • Plugins/PopUp/modern/frame/lc_bevel.bmp
  • Plugins/PopUp/modern/frame/lt.bmp
  • Plugins/PopUp/modern/frame/lt_bevel.bmp
  • Plugins/PopUp/modern/frame/rb.bmp
  • Plugins/PopUp/modern/frame/rc.bmp
  • Plugins/PopUp/modern/frame/rt.bmp
  • Plugins/PopUp/modern/mono.popupskin
  • Plugins/PopUp/modern/popupskin.config
  • Plugins/PopUp/modern/side/mono.bmp
  • Plugins/VoIPCall.dll
    .dll windows:4 windows x86 arch:x86

    c2b82006c922e6248c54e303a5d554d1


    Headers

    Imports

    Exports

    Sections

  • Plugins/clist_classic.dll
    .dll windows:4 windows x86 arch:x86

    5cd06c3b489e75c9d09015129ceacfcd


    Headers

    Imports

    Exports

    Sections

  • Plugins/dbx_3x.dll
    .dll windows:4 windows x86 arch:x86

    2984224cd4543880ed4ff53148257464


    Headers

    Imports

    Exports

    Sections

  • Plugins/historyviewer.dll
    .dll windows:4 windows x86 arch:x86

    6c5250beaaece271bb79701d2a4a45f3


    Headers

    Imports

    Exports

    Sections

  • Plugins/invite.dll
    .dll windows:4 windows x86 arch:x86

    4b540ff18b96ef387aab1c910bfcfbd0


    Headers

    Imports

    Exports

    Sections

  • Plugins/png2dib.dll
    .dll windows:4 windows x86 arch:x86

    224a408faa3e48f780387ee4505791d8


    Headers

    Imports

    Exports

    Sections

  • Plugins/saa.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/saani.dll
    .dll windows:4 windows x86 arch:x86

    508af75b4e5f804b2001f30289558e16


    Headers

    Imports

    Exports

    Sections

  • Plugins/smileyadd.dll
    .dll windows:4 windows x86 arch:x86

    1dfd68d1d6ad771bf5617ae147c6b1bc


    Headers

    Imports

    Exports

    Sections

  • Plugins/srmm.dll
    .dll windows:4 windows x86 arch:x86

    652349dfced7ded921a5b13b35e6bd53


    Headers

    Imports

    Exports

    Sections

  • Plugins/xstatus_icons.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Raketu.exe
    .exe windows:4 windows x86 arch:x86

    c8eb385f6396a3f9a0928a08887bf6ee


    Headers

    Imports

    Exports

    Sections

  • Smileys/GANT_Smileys.dll
    .dll windows:4 windows x86 arch:x86

    fc7a72a295f39d0f4e65ddd0f8f329b6


    Headers

    Imports

    Sections

  • Smileys/GANT_Smileys.msl
  • langpack_chinese.txt
  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    f42d08b582648157131f448b32a70245


    Headers

    Imports

    Exports

    Sections

  • logs/wmobile.dat
  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • rakOut/rakIn.exe
    .exe windows:4 windows x86 arch:x86

    962cc88aef5100464124fde1bae0442b


    Headers

    Imports

    Sections

  • rakOut/rakOut.exe
    .exe windows:4 windows x86 arch:x86

    d2f3499cd022d7a7fcee80cb3c34ad36


    Headers

    Imports

    Sections

  • rakOut/sipXtapi.dll
    .dll windows:4 windows x86 arch:x86

    79900df04635227249fb8abbe56a9261


    Headers

    Imports

    Exports

    Sections

  • recfiles/rec.txt
  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    aa47e7232d5930c7363066eb5c28d98e


    Headers

    Imports

    Exports

    Sections

  • start.bat
  • vmail/vmailgreet.wav
  • vmail/vmailinprogress.wav
  • vmail/vmailmessagetemp.wav
  • vmail/vmailtemp.wav
  • 新云软件.url
    .url