General

  • Target

    bad21aebcdd7b422bb7fa20c91cf287b_JaffaCakes118

  • Size

    1.5MB

  • MD5

    bad21aebcdd7b422bb7fa20c91cf287b

  • SHA1

    f81e0a40bad1b3cdba4c4f69de14c555414f6d93

  • SHA256

    47723252b2ac63a83cfe599796f25b1e6cb842ff359d6c5391bacf36dde77e19

  • SHA512

    9c795d1cd1aff3b4860893f154f58a1288451378bd933614eab82e574bf2e001c675d396509978acdeafab33bbde44df88f85f8fda5886ae972629ed509851d5

  • SSDEEP

    49152:zf3nqzylI436xruUFpDIVX4x1SRNXZ8Ghz65wq:rnqOlIU6JuyDIVXqSqyLq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • bad21aebcdd7b422bb7fa20c91cf287b_JaffaCakes118
    .rar
  • SayhiSetup_1000(738天空软件).exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Feature.dll
    .dll windows:4 windows x86 arch:x86

    9fbc974865b9d45fbe735856804a6700


    Headers

    Imports

    Exports

    Sections

  • LetoneSP.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MessageCtrl.dll
    .exe windows:4 windows x86 arch:x86

    bad33d7790757a173de24070e22e0753


    Headers

    Imports

    Sections

  • SKINS/CHAT/0003.bmp
  • SKINS/CHAT/0004.bmp
  • SKINS/CHAT/0005.bmp
  • SKINS/CHAT/0006.bmp
  • SKINS/CHAT/0007.bmp
  • SKINS/CHAT/0008.bmp
  • SKINS/CHAT/0009.bmp
  • SKINS/CHAT/0010.bmp
  • SKINS/CHAT/0011.bmp
  • SKINS/CHAT/0012.bmp
  • SKINS/CHAT/0020.bmp
  • SKINS/CHAT/0021.bmp
  • SKINS/CHECKSONG/0001.bmp
  • SKINS/CHECKSONG/0002.bmp
  • SKINS/CHECKSONG/0003.bmp
  • SKINS/CHECKSONG/0004.bmp
  • SKINS/CHECKSONG/0005.bmp
  • SKINS/CHECKSONG/0006.bmp
  • SKINS/CHECKSONG/0007.bmp
  • SKINS/CHECKSONG/0008.bmp
  • SKINS/CHECKSONG/0009.bmp
  • SKINS/CHECKSONG/0010.bmp
  • SKINS/CHECKSONG/0011.bmp
  • SKINS/CHECKSONG/0012.bmp
  • SKINS/CHECKSONG/0013.bmp
  • SKINS/CHECKSONG/0014.bmp
  • SKINS/CHECKSONG/0015.bmp
  • SKINS/CHECKSONG/0016.bmp
  • SKINS/CHECKSONG/0017.bmp
  • SKINS/CHECKSONG/0018.bmp
  • SKINS/CHECKSONG/0019.bmp
  • SKINS/CHECKSONG/0020.bmp
  • SKINS/CHECKSONG/0021.bmp
  • SKINS/CHECKSONG/0022.bmp
  • SKINS/LOGON/0001.bmp
  • SKINS/LOGON/0002.bmp
  • SKINS/LOGON/0003.bmp
  • SKINS/LOGON/0004.bmp
  • SKINS/LOGON/0005.bmp
  • SKINS/LOGON/0006.bmp
  • SKINS/LOGON/0008.bmp
  • SKINS/LOGON/0009.bmp
  • SKINS/LOGON/0010.bmp
  • SKINS/LOGON/0011.bmp
  • SKINS/LOGON/0012.bmp
  • SKINS/MAIN/0001.bmp
  • SKINS/MAIN/0002.bmp
  • SKINS/MAIN/0003.bmp
  • SKINS/MAIN/0004.bmp
  • SKINS/MAIN/0005.bmp
  • SKINS/MAIN/0006.bmp
  • SKINS/MAIN/0007.bmp
  • SKINS/MAIN/BOTBOARD/0001.bmp
  • SKINS/MAIN/BOTBOARD/0002.bmp
  • SKINS/MAIN/BOTBOARD/0003.bmp
  • SKINS/MAIN/BOTBOARD/0004.bmp
  • SKINS/MAIN/BOTBOARD/0005.bmp
  • SKINS/MAIN/BOTBOARD/0006.bmp
  • SKINS/MAIN/BOTBOARD/0007.bmp
  • SKINS/MAIN/BOTBOARD/0008.bmp
  • SKINS/MAIN/UPBOARD/0001.bmp
  • SKINS/MAIN/UPBOARD/0002.bmp
  • SKINS/MAIN/UPBOARD/0003.bmp
  • SKINS/MAIN/UPBOARD/0004.bmp
  • SKINS/MAIN/UpdateBack.bmp
  • SKINS/PHONE/0001.bmp
  • SKINS/PHONE/0002.bmp
  • SKINS/PHONE/0003.bmp
  • SKINS/PHONE/0004.bmp
  • SKINS/PHONE/0005.bmp
  • SKINS/PHONE/0006.bmp
  • SKINS/PHONE/0007.bmp
  • SKINS/PHONE/0008.bmp
  • SKINS/PHONE/0009.bmp
  • SKINS/PHONE/0010.bmp
  • SKINS/PHONE/0011.bmp
  • SKINS/PHONE/0012.bmp
  • SKINS/PHONE/0013.bmp
  • SKINS/PHONE/0014.bmp
  • SKINS/PHONE/0015.bmp
  • SKINS/PHONE/0016.bmp
  • SKINS/PHONE/0017.bmp
  • SKINS/PHONE/0018.bmp
  • SKINS/PHONE/0019.bmp
  • SKINS/PHONE/0020.bmp
  • SKINS/PHONE/0021.bmp
  • SKINS/PHONE/0022.bmp
  • SKINS/PHONE/0023.bmp
  • SKINS/REGISTER/0001.bmp
  • SKINS/REGISTER/0002.bmp
  • SKINS/REGISTER/0003.bmp
  • SKINS/REGISTER/0004.bmp
  • SKINS/REGISTER/0005.bmp
  • SKINS/REGISTER/0006.bmp
  • SKINS/REGISTER/0007.bmp
  • SKINS/REGISTER/0008.bmp
  • SKINS/REGISTER/0009.bmp
  • SKINS/REGISTER/0010.bmp
  • SKINS/REGISTER/0011.bmp
  • SKINS/SEARCHE/0001.bmp
  • SKINS/SEARCHE/0002.bmp
  • SKINS/SEARCHE/0003.bmp
  • SKINS/SEARCHE/0004.bmp
  • SKINS/SEARCHE/0005.bmp
  • SKINS/SEARCHE/0006.bmp
  • SKINS/SEARCHE/0007.bmp
  • SKINS/SEARCHE/0008.bmp
  • SKINS/SEARCHE/0009.bmp
  • SKINS/SEARCHE/0010.bmp
  • SKINS/SEARCHU/0001.bmp
  • SKINS/SEARCHU/0002.bmp
  • SKINS/SEARCHU/0003.bmp
  • SKINS/SEARCHU/0004.bmp
  • SKINS/SEARCHU/0005.bmp
  • SKINS/SEARCHU/0006.bmp
  • SKINS/SEARCHU/0007.bmp
  • SKINS/SEARCHU/0008.bmp
  • SKINS/SEARCHU/0009.bmp
  • SKINS/SEARCHU/0010.bmp
  • SKINS/SHARERES/0001.bmp
  • SKINS/SHARERES/0002.bmp
  • SKINS/SHARERES/0003.bmp
  • SKINS/SHARERES/0004.bmp
  • SKINS/SHARERES/0005.bmp
  • SKINS/SHARERES/0006.bmp
  • SKINS/SHARERES/0007.bmp
  • SKINS/SHARERES/0008.bmp
  • SKINS/SHARERES/0009.bmp
  • SKINS/SHARERES/0010.bmp
  • SKINS/SHARERES/0011.bmp
  • SKINS/SHARERES/0012.bmp
  • SKINS/SHARERES/0013.bmp
  • SKINS/SHARERES/0014.bmp
  • SKINS/SHARERES/0015.bmp
  • SKINS/SHARERES/0016.bmp
  • SKINS/SHARERES/0017.bmp
  • SKINS/SHARERES/0018.bmp
  • SKINS/SHARERES/0019.bmp
  • SKINS/SHARERES/0020.bmp
  • SKINS/SHARERES/0021.bmp
  • SKINS/SHARERES/0022.bmp
  • SKINS/SHARERES/0023.bmp
  • SKINS/SHARERES/0024.bmp
  • SKINS/SHARERES/0025.bmp
  • SKINS/SHARERES/0026.bmp
  • SKINS/SHARERES/0027.bmp
  • SKINS/SHARERES/0028.bmp
  • SKINS/SHARERES/0029.bmp
  • SKINS/SHARERES/0030.bmp
  • SKINS/SHARERES/0031.bmp
  • SKINS/SHARERES/0032.bmp
  • SKINS/SHARERES/0033.bmp
  • SKINS/SHXB/0001.bmp
  • SKINS/SHXB/0002.bmp
  • SKINS/SHXB/0003.bmp
  • SKINS/SHXB/0004.bmp
  • SKINS/SHXB/0005.bmp
  • SKINS/SHXB/0006.bmp
  • SKINS/SHXB/0007.bmp
  • SKINS/SHXB/0008.bmp
  • Sayhi.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Server.ini
  • Sound/0.wav
  • Sound/1.wav
  • Sound/2.wav
  • Sound/3.wav
  • Sound/4.wav
  • Sound/5.wav
  • Sound/6.wav
  • Sound/7.wav
  • Sound/8.wav
  • Sound/9.wav
  • Sound/Busy.wav
  • Sound/Ringback.wav
  • Sound/hash.wav
  • Sound/login.wav
  • Sound/message.wav
  • Sound/star.wav
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Update.dll
    .exe windows:4 windows x86 arch:x86

    390eb78713c22fa63613ffe2ff6c7a55


    Headers

    Imports

    Sections

  • WfwCtrl.dll
    .dll windows:4 windows x86 arch:x86

    62fdd8b92d90e0f3509c338aeed59ccd


    Headers

    Imports

    Exports

    Sections

  • licence.txt
  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    a7a98f9c2f55921feb823b6f7e5ce74f


    Headers

    Imports

    Exports

    Sections