General

  • Target

    af6475616f2cc75c6fddd3e225090ddf_JaffaCakes118

  • Size

    7.8MB

  • MD5

    af6475616f2cc75c6fddd3e225090ddf

  • SHA1

    34b40e01db4772c3ed424e66772962a1704a7ee6

  • SHA256

    50cc720b4e04592eb290b54c9858146db50a28e2a275bd957d2bdfe3aa83bf41

  • SHA512

    4d98deb551d997169c0f295fc580bcafe3aa044f7e210ac1a73d91394f8cb6895b38a5b7a12a2dc992b8d0792318423b36448512df203e17b7957e4844869dc0

  • SSDEEP

    196608:MeOVpRhP3tT3VeyVooqGid30mDRuvh7wH7b3qO/2edA5turyvsreMo:xURNd70aXRidEyoJwH7b6O/jKtuyvY8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • af6475616f2cc75c6fddd3e225090ddf_JaffaCakes118
    .rar
  • 365rili.exe
    .exe windows:5 windows x86 arch:x86

    1695812a40d1f74437cdc1e9322467ad


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:5 windows x86 arch:x86

    b1d9539c7cfd95718179dedb471b482f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/DroidSansFallback.ttf
  • $TEMP/fontinst.exe
    .exe windows:4 windows x86 arch:x86

    d3bc0f9986c3e73e0380bb6142ce2fb2


    Headers

    Imports

    Sections

  • $TEMP/fontlist.inf
  • $TEMP/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections

  • 365日历.exe
    .exe windows:5 windows x86 arch:x86

    93254e3fd6537dda59bf0307661dc7fb


    Code Sign

    Headers

    Imports

    Sections

  • 365日历.url
  • CrashRpt.dll
    .dll windows:5 windows x86 arch:x86

    d3d8e61eaff580cf13184ad9dcccb9dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CrashSender.exe
    .exe windows:5 windows x86 arch:x86

    3e6f4326fcaa44874169e2842dcb41ae


    Code Sign

    Headers

    Imports

    Sections

  • Theme/default.skn
    .zip
  • edit_note/background.png
    .png
  • edit_note/close.png
    .png
  • edit_note/save.png
    .png
  • edit_note/skin.xml
  • edit_schedule/back.png
    .png
  • edit_schedule/close.png
    .png
  • edit_schedule/edit.png
    .png
  • edit_schedule/save.png
    .png
  • edit_schedule/skin.xml
  • main/add.png
    .png
  • main/background.png
    .png
  • main/close.png
    .png
  • main/line_back0.png
    .png
  • main/line_back1.png
    .png
  • main/minimize.png
    .png
  • main/next.png
    .png
  • main/normal.png
    .png
  • main/note.png
    .png
  • main/prev.png
    .png
  • main/sched.png
    .png
  • main/scroll_bottom.png
    .png
  • main/scroll_down.png
    .png
  • main/scroll_repeat.png
    .png
  • main/scroll_top.png
    .png
  • main/scroll_up.png
    .png
  • main/select.png
    .png
  • main/setting.png
    .png
  • main/skin.xml
  • main/today.png
    .png
  • main/today_button.png
    .png
  • note/back.png
    .png
  • note/close.png
    .png
  • note/delete.png
    .png
  • note/edit.png
    .png
  • note/scroll_bottom.png
    .png
  • note/scroll_down.png
    .png
  • note/scroll_repeat.png
    .png
  • note/scroll_top.png
    .png
  • note/scroll_up.png
    .png
  • note/skin.xml
  • note/star.png
    .png
  • notes/add.png
    .png
  • notes/background.png
    .png
  • notes/close.png
    .png
  • notes/line_back0.png
    .png
  • notes/line_back1.png
    .png
  • notes/scroll_bottom.png
    .png
  • notes/scroll_down.png
    .png
  • notes/scroll_repeat.png
    .png
  • notes/scroll_top.png
    .png
  • notes/scroll_up.png
    .png
  • notes/skin.xml
  • notes/star.png
    .png
  • schedule/back.png
    .png
  • schedule/close.png
    .png
  • schedule/delete.png
    .png
  • schedule/edit.png
    .png
  • schedule/scroll_bottom.png
    .png
  • schedule/scroll_down.png
    .png
  • schedule/scroll_repeat.png
    .png
  • schedule/scroll_top.png
    .png
  • schedule/scroll_up.png
    .png
  • schedule/skin.xml
  • select_calendar/back.png
    .png
  • select_calendar/close.png
    .png
  • select_calendar/next_page.png
    .png
  • select_calendar/prev_page.png
    .png
  • select_calendar/skin.xml
  • setting/back.png
    .png
  • setting/close.png
    .png
  • setting/skin.xml
  • ZipArchive.dll
    .dll windows:5 windows x86 arch:x86

    c10988204b6c8199faca77a61464e78e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • crashrpt_lang.ini
  • data/data.cal
  • data/lunar.db
  • dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    3f5a00ef2a36f3cd8924690a5a1d6f3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • desktop.dll
    .dll windows:5 windows x86 arch:x86

    f7ab662f15f895a6b7f61ff13843ec5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    e2d500e2f3fcb36b5a74e547ae1102b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • 新云软件.url
    .url