Overview

overview

7

Static

static

3

acbsetup.exe

windows7-x64

7

acbsetup.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

AcooBrowser.exe

windows7-x64

6

AcooBrowser.exe

windows10-2004-x64

6

Plugins/Pa...ex.htm

windows7-x64

3

Plugins/Pa...ex.htm

windows10-2004-x64

3

config/Chi...er.vbs

windows7-x64

1

config/Chi...er.vbs

windows10-2004-x64

1

config/Chi...il.htm

windows7-x64

3

config/Chi...il.htm

windows10-2004-x64

3

config/def...er.vbs

windows7-x64

1

config/def...er.vbs

windows10-2004-x64

1

config/def...il.htm

windows7-x64

3

config/def...il.htm

windows10-2004-x64

3

config/def...te.htm

windows7-x64

3

config/def...te.htm

windows10-2004-x64

1

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae4d8039236e575abd5370d37714e1f5_JaffaCakes118

  • Size

    1.5MB

  • MD5

    ae4d8039236e575abd5370d37714e1f5

  • SHA1

    c447779502bbf9be0d3f5478ea09e1e9d5bb3601

  • SHA256

    dce005c449bd0eee02e4150d329fa12e914f1cf7926a7142433ae9779cb9fd16

  • SHA512

    199f8aecfc723151563047636a9cfe7e2b27795be83b3ead83c42599e1e1983b2302fa88bd690f5d2b3684610dde8fc2a2e0848236d065b0684e409ee1000ae1

  • SSDEEP

    24576:i/pCzrKG5MUwEhuq0jA6zJ1AzA0O5kJifKidRbMdYfOJ5wSpOyLE+D60P7:0Czr95lhLoA6z8EPkIfKij8E+D62

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • ae4d8039236e575abd5370d37714e1f5_JaffaCakes118
    .rar
  • acbsetup.exe
    .exe windows:4 windows x86 arch:x86

    c1d02edd28ce94e699431ce65bed28ec


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CloseAcooBrowser.dll
    .dll windows:4 windows x86 arch:x86

    b207b02b1cd4ee4ca47cd8127ba124f4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    c4fa86e78b598d87f225e209ba30786f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AcooBrowser.exe
    .exe windows:4 windows x86 arch:x86

    f543016eb5456277639e30767606bdc7


    Headers

    Imports

    Sections

  • Plugins/KillAd/killad.htm
    .html .js polyglot
  • Plugins/KillAd/killad.ico
  • Plugins/KillAd/plugin.ini
  • Plugins/PaneSample/acoo.ico
  • Plugins/PaneSample/index.htm
    .html
  • Plugins/PaneSample/plugin.ini
  • config/British English/SearchEngine.ini
  • config/Chinese Simplified/ActiveXFilters.ini
  • config/Chinese Simplified/AdFilters.ini
  • config/Chinese Simplified/Alias.ini
  • config/Chinese Simplified/DownloadManager.ini
    .vbs
  • config/Chinese Simplified/ExtTools.ini
  • config/Chinese Simplified/Groups.ini
  • config/Chinese Simplified/SearchEngine.ini
  • config/Chinese Simplified/WebBasedServices.ini
  • config/Chinese Simplified/rssfail.htm
    .html
  • config/Chinese Traditional/SearchEngine.ini
  • config/Chinese Traditional/WebBasedServices.ini
  • config/Croatian/ExtTools.ini
  • config/Croatian/Groups.ini
  • config/Croatian/SearchEngine.ini
  • config/Croatian/WebBasedServices.ini
  • config/Farsi/ExtTools.ini
  • config/Farsi/SearchEngine.ini
  • config/French/ExtTools.ini
  • config/German/Alias.ini
  • config/German/ExtTools.ini
  • config/German/Groups.ini
  • config/German/SearchEngine.ini
  • config/German/WebBasedServices.ini
  • config/Hungarian/ExtTools.ini
  • config/Hungarian/SearchEngine.ini
  • config/Italian/Alias.ini
  • config/Italian/ExtTools.ini
  • config/Italian/Groups.ini
  • config/Italian/SearchEngine.ini
  • config/Italian/WebBasedServices.ini
  • config/Japanese/ExtTools.ini
  • config/Korean/ExtTools.ini
  • config/Polish/SearchEngine.ini
  • config/Polish/WebBasedServices.ini
  • config/Portuguese Brazilian/Alias.ini
  • config/Portuguese Brazilian/ExtTools.ini
  • config/Portuguese Brazilian/Groups.ini
  • config/Portuguese Brazilian/SearchEngine.ini
  • config/Russian/Alias.ini
  • config/Russian/ExtTools.ini
  • config/Russian/Groups.ini
  • config/Russian/SearchEngine.ini
  • config/Russian/WebBasedServices.ini
  • config/Spanish/Alias.ini
  • config/defaults/ActiveXFilters.ini
  • config/defaults/AdFilters.ini
  • config/defaults/Alias.ini
  • config/defaults/DownloadManager.ini
    .vbs
  • config/defaults/ExtTools.ini
  • config/defaults/Groups.ini
  • config/defaults/Popups.ini
  • config/defaults/SearchEngine.ini
  • config/defaults/WebBasedServices.ini
  • config/defaults/control.bmp
  • config/defaults/dict.ico
  • config/defaults/dict_h.ico
  • config/defaults/image.ico
  • config/defaults/image_h.ico
  • config/defaults/install.bmp
  • config/defaults/mp3.ico
  • config/defaults/mp3_h.ico
  • config/defaults/news.ico
  • config/defaults/news_h.ico
  • config/defaults/rssfail.htm
    .html
  • config/defaults/rsstemplate.htm
    .html
  • language/Arabic.lng
  • language/British English.lng
  • language/Chinese Simplified.lng
  • language/Chinese Traditional.lng
  • language/Croatian.lng
  • language/Dutch.lng
  • language/English.lng
  • language/Farsi.lng
  • language/French.lng
  • language/German.lng
  • language/Hebrew.lng
  • language/Hungarian.lng
  • language/Indonesian.lng
  • language/Italian.lng
  • language/Korean.lng
  • language/Polish.lng
  • language/Portuguese Brazilian.lng
  • language/Portuguese.lng
  • language/Russian.lng
  • language/Serbian Cyrillic.lng
  • language/Serbian.lng
  • language/Slovak.lng
  • language/Spanish.lng
  • language/Turkish.lng
  • language/ar.bmp
  • language/br.bmp
  • language/cn.bmp
  • language/de.bmp
  • language/en.bmp
  • language/es.bmp
  • language/fr.bmp
  • language/hr.bmp
  • language/hu.bmp
  • language/id.bmp
  • language/il.bmp
  • language/ir.bmp
  • language/it.bmp
  • language/kr.bmp
  • language/nl.bmp
  • language/pl.bmp
  • language/pt.bmp
  • language/ru.bmp
  • language/sk.bmp
  • language/sr.bmp
  • language/tr.bmp
  • language/uk.bmp
  • skins/Blue Moon/MainWindow.bmp
  • skins/Blue Moon/Toolbar.bmp
  • skins/Blue Moon/skin.xml
    .xml
  • skins/Corona/MainWindow.bmp
  • skins/Corona/Toolbar.bmp
  • skins/Corona/skin.xml
    .xml
  • skins/MacX/BarMark.bmp
  • skins/MacX/clips.bmp
  • skins/MacX/skin.xml
    .xml
  • skins/NucleoX/MainWindow.bmp
  • skins/NucleoX/Toolbar.bmp
  • skins/NucleoX/skin.xml
    .xml
  • skins/SkinVista/FrameVista.bmp
  • skins/SkinVista/skin.xml
    .xml
  • skins/SkinVista/toolbar.bmp
  • sounds/adblocked.wav
  • sounds/popblocked.wav
  • 安装说明.url
    .url