General

  • Target

    b66d1c46194099076823e7f4d53262f0_JaffaCakes118

  • Size

    3.3MB

  • MD5

    b66d1c46194099076823e7f4d53262f0

  • SHA1

    299352638fb96871ccbaf4f1a90749fdd22844c3

  • SHA256

    c399074a74e618cee37102f966878d98d8df62894ea8a9a0dd260bcef3173240

  • SHA512

    9feaf431aedfec14ca28e68e0dbeda328c95fffac7dfb10cafec1c023966bc75b2b9bc121eca969f3f79a55fd2dba01956a2b609ab14cad956de01b3e1d13c56

  • SSDEEP

    98304:4zU447Y6lGkGy5VdhtK7WSZIN8CulaMXIFlw8MC6:dg2Gy5LhuWqIPulR4U8M5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • b66d1c46194099076823e7f4d53262f0_JaffaCakes118
    .rar
  • BMailQY/BMailQY.exe
    .exe windows:4 windows x86 arch:x86

    bc10a7cb3fbd1e3255c189cb14c7b32b


    Headers

    Imports

    Sections

  • BMailQY/BMailQY.exe.intermediate.manifest
    .xml
  • BMailQY/BookInfo.dll
    .dll windows:4 windows x86 arch:x86

    6fe3cdebe2201040e140c3d174c717e5


    Headers

    Imports

    Exports

    Sections

  • BMailQY/CA.crt
  • BMailQY/ClientTool.exe
    .exe windows:4 windows x86 arch:x86

    0a150e18026b30870f5a1f413750f53d


    Headers

    Imports

    Sections

  • BMailQY/ClientWebIM.exe
    .exe windows:4 windows x86 arch:x86

    442c1ca7789f7cf34317b5ddfe6bdc90


    Headers

    Imports

    Sections

  • BMailQY/Face/0.gif
    .gif
  • BMailQY/Face/1.gif
    .gif
  • BMailQY/Face/10.gif
    .gif
  • BMailQY/Face/11.gif
    .gif
  • BMailQY/Face/12.gif
    .gif
  • BMailQY/Face/13.gif
    .gif
  • BMailQY/Face/14.gif
    .gif
  • BMailQY/Face/15.gif
    .gif
  • BMailQY/Face/16.gif
    .gif
  • BMailQY/Face/17.gif
    .gif
  • BMailQY/Face/18.gif
    .gif
  • BMailQY/Face/19.gif
    .gif
  • BMailQY/Face/2.gif
    .gif
  • BMailQY/Face/20.gif
    .gif
  • BMailQY/Face/21.gif
    .gif
  • BMailQY/Face/22.gif
    .gif
  • BMailQY/Face/23.gif
    .gif
  • BMailQY/Face/24.gif
    .gif
  • BMailQY/Face/25.gif
    .gif
  • BMailQY/Face/26.gif
    .gif
  • BMailQY/Face/27.gif
    .gif
  • BMailQY/Face/28.gif
    .gif
  • BMailQY/Face/29.gif
    .gif
  • BMailQY/Face/3.gif
    .gif
  • BMailQY/Face/30.gif
    .gif
  • BMailQY/Face/31.gif
    .gif
  • BMailQY/Face/32.gif
    .gif
  • BMailQY/Face/33.gif
    .gif
  • BMailQY/Face/34.gif
    .gif
  • BMailQY/Face/35.gif
    .gif
  • BMailQY/Face/36.gif
    .gif
  • BMailQY/Face/37.gif
    .gif
  • BMailQY/Face/38.gif
    .gif
  • BMailQY/Face/39.gif
    .gif
  • BMailQY/Face/4.gif
    .gif
  • BMailQY/Face/40.gif
    .gif
  • BMailQY/Face/41.gif
    .gif
  • BMailQY/Face/42.gif
    .gif
  • BMailQY/Face/43.gif
    .gif
  • BMailQY/Face/44.gif
    .gif
  • BMailQY/Face/45.gif
    .gif
  • BMailQY/Face/46.gif
    .gif
  • BMailQY/Face/47.gif
    .gif
  • BMailQY/Face/48.gif
    .gif
  • BMailQY/Face/49.gif
    .gif
  • BMailQY/Face/5.gif
    .gif
  • BMailQY/Face/50.gif
    .gif
  • BMailQY/Face/51.gif
    .gif
  • BMailQY/Face/52.gif
    .gif
  • BMailQY/Face/53.gif
    .gif
  • BMailQY/Face/54.gif
    .gif
  • BMailQY/Face/55.gif
    .gif
  • BMailQY/Face/56.gif
    .gif
  • BMailQY/Face/57.gif
    .gif
  • BMailQY/Face/58.gif
    .gif
  • BMailQY/Face/59.gif
    .gif
  • BMailQY/Face/6.gif
    .gif
  • BMailQY/Face/60.gif
    .gif
  • BMailQY/Face/61.gif
    .gif
  • BMailQY/Face/62.gif
    .gif
  • BMailQY/Face/63.gif
    .gif
  • BMailQY/Face/64.gif
    .gif
  • BMailQY/Face/65.gif
    .gif
  • BMailQY/Face/66.gif
    .gif
  • BMailQY/Face/67.gif
    .gif
  • BMailQY/Face/68.gif
    .gif
  • BMailQY/Face/69.gif
    .gif
  • BMailQY/Face/7.gif
    .gif
  • BMailQY/Face/70.gif
    .gif
  • BMailQY/Face/71.gif
    .gif
  • BMailQY/Face/72.gif
    .gif
  • BMailQY/Face/73.gif
    .gif
  • BMailQY/Face/74.gif
    .gif
  • BMailQY/Face/75.gif
    .gif
  • BMailQY/Face/76.gif
    .gif
  • BMailQY/Face/77.gif
    .gif
  • BMailQY/Face/78.gif
    .gif
  • BMailQY/Face/79.gif
    .gif
  • BMailQY/Face/8.gif
    .gif
  • BMailQY/Face/80.gif
    .gif
  • BMailQY/Face/81.gif
    .gif
  • BMailQY/Face/82.gif
    .gif
  • BMailQY/Face/83.gif
    .gif
  • BMailQY/Face/84.gif
    .gif
  • BMailQY/Face/85.gif
    .gif
  • BMailQY/Face/86.gif
    .gif
  • BMailQY/Face/87.gif
    .gif
  • BMailQY/Face/88.gif
    .gif
  • BMailQY/Face/89.gif
    .gif
  • BMailQY/Face/9.gif
    .gif
  • BMailQY/Face/90.gif
    .gif
  • BMailQY/Face/91.gif
    .gif
  • BMailQY/Face/92.gif
    .gif
  • BMailQY/Face/93.gif
    .gif
  • BMailQY/Face/94.gif
    .gif
  • BMailQY/Face/95.gif
    .gif
  • BMailQY/License.txt
  • BMailQY/Microsoft.VC80.CRT.manifest
    .xml
  • BMailQY/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
    .xml
  • BMailQY/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    407b9cffcc90643d707c2de8d3f33b5a


    Headers

    Imports

    Exports

    Sections

  • BMailQY/Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    9fb682fe34f5d965faf4cf424fa6c000


    Headers

    Imports

    Exports

    Sections

  • BMailQY/Microsoft.VC80.CRT/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    8eb98c77a1ada89df5027bd5bf01c2f6


    Headers

    Imports

    Exports

    Sections

  • BMailQY/MngInfo.dll
    .dll windows:4 windows x86 arch:x86

    1a622d44a31325d27bba6a94c9f21cff


    Headers

    Imports

    Exports

    Sections

  • BMailQY/MngStore.dll
    .dll windows:4 windows x86 arch:x86

    75b0c05f97eebef16e4b096e76b9aba5


    Headers

    Imports

    Exports

    Sections

  • BMailQY/NetMng.dll
    .dll windows:4 windows x86 arch:x86

    39b577d5fd60f378c8757d86a3706e7a


    Headers

    Imports

    Exports

    Sections

  • BMailQY/OnlineUpdata.exe
    .exe windows:4 windows x86 arch:x86

    da61d6fdb19df2a548f5de8affa4fb9f


    Headers

    Imports

    Sections

  • BMailQY/Photofaces/10_1.bmp
  • BMailQY/Photofaces/10_3.bmp
  • BMailQY/Photofaces/11_1.bmp
  • BMailQY/Photofaces/11_3.bmp
  • BMailQY/Photofaces/12_1.bmp
  • BMailQY/Photofaces/12_3.bmp
  • BMailQY/Photofaces/13_1.bmp
  • BMailQY/Photofaces/13_3.bmp
  • BMailQY/Photofaces/14_1.bmp
  • BMailQY/Photofaces/14_3.bmp
  • BMailQY/Photofaces/15_1.bmp
  • BMailQY/Photofaces/15_3.bmp
  • BMailQY/Photofaces/16_1.bmp
  • BMailQY/Photofaces/16_3.bmp
  • BMailQY/Photofaces/17_1.bmp
  • BMailQY/Photofaces/17_3.bmp
  • BMailQY/Photofaces/18_1.bmp
  • BMailQY/Photofaces/18_3.bmp
  • BMailQY/Photofaces/19_1.bmp
  • BMailQY/Photofaces/19_3.bmp
  • BMailQY/Photofaces/1_1.bmp
  • BMailQY/Photofaces/1_3.bmp
  • BMailQY/Photofaces/20_1.bmp
  • BMailQY/Photofaces/20_3.bmp
  • BMailQY/Photofaces/21_1.bmp
  • BMailQY/Photofaces/21_3.bmp
  • BMailQY/Photofaces/22_1.bmp
  • BMailQY/Photofaces/22_3.bmp
  • BMailQY/Photofaces/23_1.bmp
  • BMailQY/Photofaces/23_3.bmp
  • BMailQY/Photofaces/24_1.bmp
  • BMailQY/Photofaces/24_3.bmp
  • BMailQY/Photofaces/25_1.bmp
  • BMailQY/Photofaces/25_3.bmp
  • BMailQY/Photofaces/26_1.bmp
  • BMailQY/Photofaces/26_3.bmp
  • BMailQY/Photofaces/27_1.bmp
  • BMailQY/Photofaces/27_3.bmp
  • BMailQY/Photofaces/28_1.bmp
  • BMailQY/Photofaces/28_3.bmp
  • BMailQY/Photofaces/29_1.bmp
  • BMailQY/Photofaces/29_3.bmp
  • BMailQY/Photofaces/2_1.bmp
  • BMailQY/Photofaces/2_3.bmp
  • BMailQY/Photofaces/30_1.bmp
  • BMailQY/Photofaces/30_3.bmp
  • BMailQY/Photofaces/3_1.bmp
  • BMailQY/Photofaces/3_3.bmp
  • BMailQY/Photofaces/4_1.bmp
  • BMailQY/Photofaces/4_3.bmp
  • BMailQY/Photofaces/5_1.bmp
  • BMailQY/Photofaces/5_3.bmp
  • BMailQY/Photofaces/6_1.bmp
  • BMailQY/Photofaces/6_3.bmp
  • BMailQY/Photofaces/7_1.bmp
  • BMailQY/Photofaces/7_3.bmp
  • BMailQY/Photofaces/8_1.bmp
  • BMailQY/Photofaces/8_3.bmp
  • BMailQY/Photofaces/9_1.bmp
  • BMailQY/Photofaces/9_3.bmp
  • BMailQY/Photofaces/Self.bmp
  • BMailQY/ReMail.exe
    .exe windows:4 windows x86 arch:x86

    dbe7d936ca3f73ea9dbc3f6b36316f5c


    Headers

    Imports

    Sections

  • BMailQY/ServerConfig.db
  • BMailQY/Weather/1.bmp
  • BMailQY/Weather/10.bmp
  • BMailQY/Weather/11.bmp
  • BMailQY/Weather/12.bmp
  • BMailQY/Weather/13.bmp
  • BMailQY/Weather/14.bmp
  • BMailQY/Weather/15.bmp
  • BMailQY/Weather/16.bmp
  • BMailQY/Weather/17.bmp
  • BMailQY/Weather/18.bmp
  • BMailQY/Weather/19.bmp
  • BMailQY/Weather/2.bmp
  • BMailQY/Weather/20.bmp
  • BMailQY/Weather/21.bmp
  • BMailQY/Weather/22.bmp
  • BMailQY/Weather/23.bmp
  • BMailQY/Weather/24.bmp
  • BMailQY/Weather/25.bmp
  • BMailQY/Weather/26.bmp
  • BMailQY/Weather/27.bmp
  • BMailQY/Weather/28.bmp
  • BMailQY/Weather/29.bmp
  • BMailQY/Weather/3.bmp
  • BMailQY/Weather/30.bmp
  • BMailQY/Weather/31.bmp
  • BMailQY/Weather/32.bmp
  • BMailQY/Weather/4.bmp
  • BMailQY/Weather/5.bmp
  • BMailQY/Weather/6.bmp
  • BMailQY/Weather/7.bmp
  • BMailQY/Weather/8.bmp
  • BMailQY/Weather/9.bmp
  • BMailQY/Weather/Big1.bmp
  • BMailQY/Weather/Big10.bmp
  • BMailQY/Weather/Big11.bmp
  • BMailQY/Weather/Big12.bmp
  • BMailQY/Weather/Big13.bmp
  • BMailQY/Weather/Big14.bmp
  • BMailQY/Weather/Big15.bmp
  • BMailQY/Weather/Big16.bmp
  • BMailQY/Weather/Big17.bmp
  • BMailQY/Weather/Big18.bmp
  • BMailQY/Weather/Big19.bmp
  • BMailQY/Weather/Big2.bmp
  • BMailQY/Weather/Big20.bmp
  • BMailQY/Weather/Big21.bmp
  • BMailQY/Weather/Big22.bmp
  • BMailQY/Weather/Big23.bmp
  • BMailQY/Weather/Big24.bmp
  • BMailQY/Weather/Big25.bmp
  • BMailQY/Weather/Big26.bmp
  • BMailQY/Weather/Big27.bmp
  • BMailQY/Weather/Big28.bmp
  • BMailQY/Weather/Big29.bmp
  • BMailQY/Weather/Big3.bmp
  • BMailQY/Weather/Big30.bmp
  • BMailQY/Weather/Big31.bmp
  • BMailQY/Weather/Big32.bmp
  • BMailQY/Weather/Big4.bmp
  • BMailQY/Weather/Big5.bmp
  • BMailQY/Weather/Big6.bmp
  • BMailQY/Weather/Big7.bmp
  • BMailQY/Weather/Big8.bmp
  • BMailQY/Weather/Big9.bmp
  • BMailQY/ad/AdConfig.db
  • BMailQY/ad/one.bmp
  • BMailQY/ad/two.bmp
  • BMailQY/client.pem
  • BMailQY/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    574b96e9a07cceef78f2bba02197adcf


    Headers

    Imports

    Exports

    Sections

  • BMailQY/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    407b9cffcc90643d707c2de8d3f33b5a


    Headers

    Imports

    Exports

    Sections

  • BMailQY/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    9fb682fe34f5d965faf4cf424fa6c000


    Headers

    Imports

    Exports

    Sections

  • BMailQY/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    8eb98c77a1ada89df5027bd5bf01c2f6


    Headers

    Imports

    Exports

    Sections

  • BMailQY/popsmtp.db
  • BMailQY/readme.txt
  • BMailQY/sslUserList.db
  • BMailQY/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    c1a4df7eb1880bc7bac47d9c924ecbf9


    Headers

    Imports

    Exports

    Sections