General

  • Target

    a96a7df114abbd843136da75af12121e_JaffaCakes118

  • Size

    5.6MB

  • MD5

    a96a7df114abbd843136da75af12121e

  • SHA1

    fb07eb7ce3c14353a7d4dcbf8afbf0f463041c83

  • SHA256

    86602d62376f56467bd7ab023acbbfe6c4a371e49c8e9ba62a18c79e19af2302

  • SHA512

    49598ff1db183404759ddd447119ddb7e085fb3fb4cd19b1670a8105438a17c651c097ac38b47b6daa87c2a18f7e025ba098c04271bef31de27b306d7abfaf8b

  • SSDEEP

    98304:7STiPIldmCqdgftcpwRE3mxXMjfBeHIWP2PPThweFsyU9peC4xMpDsA0AY9C:gwdG0w5MfYHIPlFRU90C8MtCAYA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • a96a7df114abbd843136da75af12121e_JaffaCakes118
    .rar
  • Viewlet-1.5-Setup-cn.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $LOCALAPPDATA/3Pi Studio/Viewlet/1.5/Setting/favorites.xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/wiaaut.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c4d5288cc0f629fc5c7869b66bfe2953


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Viewlet/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections

  • Changes.txt
  • Config/config.ini
  • Config/settings.ini
  • Interop.WIA.1.0.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Language/Chinese/language.ini
  • License.txt
  • SnaperHelper.dll
    .dll windows:5 windows x86 arch:x86

    56b550a9baa3a1e72a4250646b37c0aa


    Headers

    Imports

    Exports

    Sections

  • Viewers/dsoframer.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ac5029424c9f1ac0d664a95501997bed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Viewlet.chm
    .chm
  • Viewlet.exe
    .exe windows:5 windows x86 arch:x86

    69ab9ce60fb6320b85152ed610243d82


    Headers

    Imports

    Exports

    Sections

  • Viewlet.exe.manifest
    .xml
  • WiaUtils.dll
    .dll windows:5 windows x86 arch:x86

    617169707a008e516849130ce94a83e0


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • 新云软件.url
    .url