General

  • Target

    b52eb8f41f9096abe84ff20360fdcd7a_JaffaCakes118

  • Size

    4.3MB

  • MD5

    b52eb8f41f9096abe84ff20360fdcd7a

  • SHA1

    21d515a0633c65cf98bfd77a5bd3f902ef6fcea5

  • SHA256

    0258a735efaefe3411cc07f33486df4af621cc06bfbbdbcd64250fb2fa661607

  • SHA512

    3902c133a869eb2897f759218c960b1f93fc7fcee154f99048bad00386c35a150019af630c317712d4a77dcaf97d507d718168748c44ea80c73005c72bc7effe

  • SSDEEP

    98304:O3REGlh0VcPZGUAhqzAMV9ZKIOLg1NVZbRPrirM0o/gZH0uX0/Q:sREGlyqGUAhq9ZKIOUzNgZUut

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b52eb8f41f9096abe84ff20360fdcd7a_JaffaCakes118
    .rar
  • bittorrent-acceleration-tool-free.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    c63ba316533609531fac22f3877f847b


    Code Sign

    Headers

    Imports

    Sections

  • $SYSDIR/SkinCrafter3.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4772510e3b266425f4546600f0c96a3e


    Headers

    Imports

    Exports

    Sections

  • BitTorrent Acceleration Tool.exe
    .exe windows:5 windows x86 arch:x86

    4e4d5f64527a22b285060a1ad64eb7f3


    Headers

    Imports

    Sections

  • Skin.skf
  • gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • mfc80.dll
    .dll windows:4 windows x86 arch:x86

    171634aabc6eff9406d434016ff974c3


    Headers

    Imports

    Sections

  • packet.dll
    .dll windows:4 windows x86 arch:x86

    dc8c0d40b34348cdabb47af1cd619332


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • 新云软件.url
    .url