General

  • Target

    a677182b268599dd377d034d200b4f13_JaffaCakes118

  • Size

    3.7MB

  • MD5

    a677182b268599dd377d034d200b4f13

  • SHA1

    35b9068dfd1c6b788a5e4c4f51cb8c865d949122

  • SHA256

    8c86ee8cc4b161508dd86fa0e761f796c8bc8dc2ab770c47a72e0357f858eaa7

  • SHA512

    2de408e59604f3c60173b25ada5637cf8286607c4ac2e054f25bcca0ed0eb5f0eedecdf5102c4c4a297c8d889b12380be2cc9766180c18b9c84edded4b477d29

  • SSDEEP

    98304:wWGZyqr1KYu4Jag4k9VrMgO0v76MnRuKVT:fGUqr1KYOiXrfDTFuKR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • a677182b268599dd377d034d200b4f13_JaffaCakes118
    .rar
  • 新云软件.url
    .url
  • 网页刷新器.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • PBACC115.DLL
    .dll windows:4 windows x86 arch:x86

    48769b3ac8557223e4933e5d91c5c711


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBDWE115.DLL
    .dll windows:4 windows x86 arch:x86

    7615764a96f6bb976bdb4565de80da1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBODB115.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    82caaf574774cf543628dad1b4605bb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBSHR115.DLL
    .dll windows:4 windows x86 arch:x86

    ddb9722f4fe0cde8e1062a61683530c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBVM115.DLL
    .dll windows:4 windows x86 arch:x86

    81409f05df0d6641ec892d9bd063c125


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • cookies.bat
  • libjcc.dll
    .dll windows:4 windows x86 arch:x86

    1b0a346547e8b86414e28a4684240aa7


    Headers

    Imports

    Exports

    Sections

  • libjutils.dll
    .dll windows:4 windows x86 arch:x86

    33ee2cba20d82f3820335a0a2b65bb83


    Headers

    Imports

    Exports

    Sections

  • pbdpl115.DLL
    .dll windows:4 windows x86 arch:x86

    daebdb43eef6bb1de7740ebaefecc2d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pbodb115.ini
  • pbole110.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    abb988df25e6628bb84da6f3a05bc55a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • web.dat
  • web.exe
    .exe windows:4 windows x86 arch:x86

    1a3d8c3f39a0e02fe506a5bee2936643


    Headers

    Imports

    Sections

  • ˵.txt