General

  • Target

    ad724ab7e724a6ad94bd19c60ea93435_JaffaCakes118

  • Size

    2.8MB

  • MD5

    ad724ab7e724a6ad94bd19c60ea93435

  • SHA1

    a40f916a5f83171ee752bfaccd0c460c344d1c49

  • SHA256

    5f3ecbd7e022a13de46a6193408fa604ff0668aa98ed99c83f34ce3f89f7ba54

  • SHA512

    fa9e0bea4991e921269c9fbd374d59368617be3de759ecfc03fb22294b644f7f3683b309a418da7c19839ab0a1af2b500efb3ef367a952b43bd4105398945662

  • SSDEEP

    49152:d23lVQeLfm2nchLW7hsihwxXPRXlwcbY5Z5F0PSKoR/eyp00kXhtl/pFD/:d2/QeLfm2n8Cm+GVnbYpey20yDn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ad724ab7e724a6ad94bd19c60ea93435_JaffaCakes118
    .rar
  • picsuu3.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_YourSplash.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PROGRAM_FILES_COMMON/packshow/MouseHook.dll
    .dll windows:4 windows x86 arch:x86

    c01bb99c3c84675293cafd641823eb90


    Headers

    Imports

    Exports

    Sections

  • $PROGRAM_FILES_COMMON/packshow/psmouse.exe
    .exe windows:4 windows x86 arch:x86

    726a76c0f1477e72352797fa80df3a6f


    Headers

    Imports

    Sections

  • $SYSDIR/Conf.dll
    .dll windows:4 windows x86 arch:x86

    8141c1bf3d22ee2864d8c88cb4d4fecd


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/HYWBaseClass.dll
    .dll windows:4 windows x86 arch:x86

    72229dfb533d0dd63f46f5c2f69efe4f


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/ImagesListCtrl.dll
    .dll windows:4 windows x86 arch:x86

    1066def47a0c104b60b9187ed5e4e523


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/PicsUU.scr
    .exe windows:4 windows x86 arch:x86

    5225bcd12cf375e88e570615151f5449


    Headers

    Imports

    Sections

  • $SYSDIR/PsProt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    951768644aa31fd63026973e00248b15


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/Set.dll
    .dll windows:4 windows x86 arch:x86

    946e16d9ae9fbb858319557f9b6ae322


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/SkinPlusPlus.dll
    .dll windows:4 windows x86 arch:x86

    010f175744c5f353343b8c5c18b16a0c


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/Upload.dll
    .dll windows:4 windows x86 arch:x86

    a59840fd24f23698d07f84a3615f1349


    Headers

    Imports

    Exports

    Sections

  • Conf.dll
    .dll windows:4 windows x86 arch:x86

    8141c1bf3d22ee2864d8c88cb4d4fecd


    Headers

    Imports

    Exports

    Sections

  • HYWBaseClass.dll
    .dll windows:4 windows x86 arch:x86

    72229dfb533d0dd63f46f5c2f69efe4f


    Headers

    Imports

    Exports

    Sections

  • ImagesListCtrl.dll
    .dll windows:4 windows x86 arch:x86

    1066def47a0c104b60b9187ed5e4e523


    Headers

    Imports

    Exports

    Sections

  • MultiThreadUpload.exe
    .exe windows:4 windows x86 arch:x86

    f000ccf39270b63e816ea21a667547c2


    Headers

    Imports

    Exports

    Sections

  • Res/about.ico
  • Res/add.ico
  • Res/cancel.ico
  • Res/crop.ico
  • Res/crop_d.ico
  • Res/d_about.ico
  • Res/d_add.ico
  • Res/d_cancel.ico
  • Res/d_l.ico
  • Res/d_off.ico
  • Res/d_op.ico
  • Res/d_r.ico
  • Res/d_setup.ico
  • Res/d_tran.ico
  • Res/flip.ico
  • Res/flip_d.ico
  • Res/fullscreen.ico
  • Res/fullscreen_d.ico
  • Res/imagesize.ico
  • Res/imagesize_d.ico
  • Res/l.ico
  • Res/move.ico
  • Res/move_d.ico
  • Res/next.ico
  • Res/next_d.ico
  • Res/off.ico
  • Res/oldsize.ico
  • Res/oldsize_d.ico
  • Res/op.ico
  • Res/pre.ico
  • Res/pre_d.ico
  • Res/r.ico
  • Res/redo.ico
  • Res/redo_d.ico
  • Res/save.ico
  • Res/save_d.ico
  • Res/saveas.ico
  • Res/saveas_d.ico
  • Res/select.ico
  • Res/select_d.ico
  • Res/setup.ico
  • Res/smalll.ico
  • Res/smalll_d.ico
  • Res/smalloff.ico
  • Res/smalloff_d.ico
  • Res/smallr.ico
  • Res/smallr_d.ico
  • Res/tran.ico
  • Res/undo.ico
  • Res/undo_d.ico
  • Res/view.ico
  • Res/view_d.ico
  • Res/zoomin.ico
  • Res/zoomin_d.ico
  • Res/zoomout.ico
  • Res/zoomout_d.ico
  • Set.dll
    .dll windows:4 windows x86 arch:x86

    946e16d9ae9fbb858319557f9b6ae322


    Headers

    Imports

    Exports

    Sections

  • SlickOS2.ssk
  • Upload.dll
    .dll windows:4 windows x86 arch:x86

    a59840fd24f23698d07f84a3615f1349


    Headers

    Imports

    Exports

    Sections

  • actives.dat
  • apupdate.exe
    .exe windows:4 windows x86 arch:x86

    3931cd85d60d8f1205b45e6cb6b1050e


    Headers

    Imports

    Sections

  • classify.dat
  • conf.dat
  • conf2.dat
  • conf3.dat
  • default.bmp
  • default.config
    .xml
  • default2.bmp
  • default2.config
    .xml
  • default3.bmp
  • default3.config
    .xml
  • defaulttip.jpg
    .jpg
  • mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • packshow.exe
    .exe windows:4 windows x86 arch:x86

    129428036aa73f12880705a4163e69e0


    Headers

    Imports

    Exports

    Sections

  • skin.dll
    .dll windows:4 windows x86 arch:x86

    03ce9f6013d5512ddfdc28491347e6ed


    Headers

    Imports

    Exports

    Sections

  • themes.dat
  • usetwocolumn.flag
  • waitting.gif
    .gif
  • waitting2.gif
    .gif
  • waitting3.gif
    .gif
  • wallpaper/wallpaper.html
    .html
  • жĿ.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url