show
General
-
Target
bc639e7ab87ac73beed494a98c5bb33c_JaffaCakes118
-
Size
8.4MB
-
MD5
bc639e7ab87ac73beed494a98c5bb33c
-
SHA1
9762d5180cd7a3e80395f695b39265b389b16e70
-
SHA256
cf6ccdbc63df0be4bf4487a223017d7fc75daf88bc39c6ea9d2d2dea630616af
-
SHA512
1b13cec41398eab836105cd5695533f7246d57ebd53dadddf5bb4cdd2e6cbf8be2c425be28af6e8c1a11d8d3cc850f69c40e238c513c8b667208e5e2f4b5b4f2
-
SSDEEP
196608:/DbnOLnkv6Zc4tbNvkFQ1OcyvZ7y0I6HO7GXrmjlK6gm:/DbOLAkhbNvkFMOHvt1I0IGqlK6gm
Score
7/10
Malware Config
Signatures
-
ASPack v2.12-2.42 10 IoCs
Detects executables packed with ASPack v2.12-2.42
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 26 IoCs
Checks for missing Authenticode signature.
Files
-
bc639e7ab87ac73beed494a98c5bb33c_JaffaCakes118
Headers
Sections
-
$PLUGINSDIR/AdvSplash.dll
741b6bafe355b63a372d737b30543a95
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/InstallOptions.dll
57354bdeea3dfae6e948101add87501a
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/LangDLL.dll
2db813254ea8b4d2a92d703ecb659f39
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/NotifyIcon.dll
3fcf8c4eeb6afa0c9acb0e2001594da5
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/System.dll
4ec328f99bdd944fc98d8a5cf11f7a62
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/splash.bmp
-
$TEMP/ICON.ico
-
AddIns/WinmailReader.exe
Headers
Sections
-
DM2005.exe
Headers
Sections
-
Face/00.gif
-
Face/01.gif
-
Face/02.gif
-
Face/03.gif
-
Face/04.gif
-
Face/05.gif
-
Face/06.gif
-
Face/07.gif
-
Face/08.gif
-
Face/09.gif
-
Face/10.gif
-
Face/11.gif
-
Face/12.gif
-
Face/13.gif
-
Face/14.gif
-
Face/15.gif
-
Face/16.gif
-
Face/17.gif
-
Face/18.gif
-
Face/19.gif
-
Face/20.gif
-
Face/21.gif
-
Face/22.gif
-
Face/23.gif
-
Face/24.gif
-
Face/25.gif
-
Face/26.gif
-
Face/27.gif
-
Face/28.gif
-
Face/29.gif
-
Face/30.gif
-
Face/31.gif
-
Face/32.gif
-
Face/33.gif
-
Face/34.gif
-
Face/35.gif
-
Face/36.gif
-
Face/37.gif
-
Face/38.gif
-
Face/39.gif
-
Face/40.gif
-
Face/41.gif
-
Face/42.gif
-
Face/43.gif
-
Face/44.gif
-
Face/45.gif
-
Face/46.gif
-
Face/47.gif
-
Face/48.gif
-
Face/49.gif
-
Face/50.gif
-
Face/51.gif
-
Face/52.gif
-
Face/53.gif
-
Face/54.gif
-
Face/55.gif
-
Face/56.gif
-
Face/57.gif
-
Face/58.gif
-
Face/59.gif
-
Face/60.gif
-
Face/61.gif
-
Face/62.gif
-
Face/63.gif
-
Face/64.gif
-
Face/65.gif
-
Face/66.gif
-
Face/67.gif
-
Face/68.gif
-
Face/69.gif
-
Face/70.gif
-
Face/71.gif
-
Face/72.gif
-
Face/73.gif
-
Face/74.gif
-
Face/75.gif
-
Face/76.gif
-
Face/77.gif
-
Face/78.gif
-
Face/79.gif
-
Face/80.gif
-
Face/81.gif
-
Face/82.gif
-
Face/83.gif
-
Face/84.gif
-
Face/85.gif
-
Face/86.gif
-
Face/87.gif
-
Face/88.gif
-
Face/89.gif
-
Face/90.gif
-
Face/91.gif
-
Face/92.gif
-
Face/93.gif
-
Face/94.gif
-
Face/95.gif
-
Face/L01.gif
-
Face/L02.gif
-
Face/L03.gif
-
Face/L04.gif
-
Face/L05.gif
-
Face/L06.gif
-
Face/L07.gif
-
Face/L08.gif
-
Face/L09.gif
-
Face/L10.gif
-
Face/Title.ini
-
Face/VX-01.gif
-
Face/VX-02.gif
-
Face/VX-03.gif
-
Face/VX-04.gif
-
Face/VX-05.gif
-
Face/VX-06.gif
-
Face/VX-07.gif
-
Face/VX-08.gif
-
Face/VX-09.gif
-
Face/VX-10.gif
-
Face/VX-11.gif
-
Language/Language.ini
-
Language/Resource.big5
-
Language/Resource.de
-
Language/Resource.en
-
Language/Resource.fr
-
Language/Resource.gb
-
Language/Resource.it
-
Language/Resource.ja
-
Language/Resource.nl
-
Language/Resource.pl
-
Language/Resource.ru
-
Language/Resource.sp
-
License.txt
-
POPSmtp.ini
-
Readme.rtf
-
Rss/DefRss_big5.ini
-
Rss/DefRss_fr.ini
-
Rss/DefRss_gb.ini
-
Rss/ListTree.html
-
Rss/Readme.txt
-
Rss/RssBasic.html
-
Sys/AccessFixed.dll
Headers
Sections
-
Sys/DbCreator.dao
Headers
Exports
Sections
-
Sys/DmData.dao.zp
-
Sys/DmLib.dat
4a9d368799325ccb3efb18f24c8b34c2
Headers
Imports
Exports
Sections
-
Sys/DmLib.dll
Headers
Exports
Sections
-
Sys/DmMapi.dll
Headers
Exports
Sections
-
Sys/HtmlCode.txt
-
Sys/IPSearcher.dll
bcbc4703c59d2fd0161de0cbcb4074fe
Headers
Imports
Exports
Sections
-
Sys/KsDHTMLEDLib.LIC
-
Sys/KsDHTMLEDLib.ocx
Headers
Exports
Sections
-
Sys/MailIn.wav
-
Sys/MultUser.dao.zp
-
Sys/NameCard.html
-
Sys/OfficeAddIn.dll
Headers
Exports
Sections
-
Sys/QQWry.Dat
-
Sys/Resource/big5_Country.txt
-
Sys/Resource/big5_FirstName.txt
-
Sys/Resource/big5_PostalCode.txt
-
Sys/Resource/gb_Country.txt
-
Sys/Resource/gb_FirstName.txt
-
Sys/Resource/gb_PostalCode.txt
-
Sys/Resource/pl_Country.txt
-
Sys/Resource/pl_PostalCode.txt
-
Sys/Skins/Buttomline.jpg
-
Sys/Skins/Button0.BMP
-
Sys/Skins/Button1.BMP
-
Sys/Skins/Button2.BMP
-
Sys/Skins/Button3.BMP
-
Sys/Skins/Button4.BMP
-
Sys/Skins/Button5.BMP
-
Sys/Skins/Button6.bmp
-
Sys/Skins/Button7.BMP
-
Sys/Skins/Button8.BMP
-
Sys/Skins/Button9.BMP
-
Sys/Skins/ButtonXP.BMP
-
Sys/Skins/DreamMail.ico
-
Sys/Skins/Error48.bmp
-
Sys/Skins/GroupSend.bmp
-
Sys/Skins/ImgListSysCmdBtns.bmp
-
Sys/Skins/ImgPhoto.bmp
-
Sys/Skins/Largebmp.bmp
-
Sys/Skins/Mailbox.bmp
-
Sys/Skins/Option.ini
-
Sys/Skins/Smallbmp.bmp
-
Sys/Skins/TrayIcon_AddIn.bmp
-
Sys/Skins/TrayIcon_NewMail98.bmp
-
Sys/Skins/TrayIcon_NewMailxp.bmp
-
Sys/Skins/TrayIcon_win98.bmp
-
Sys/Skins/TrayIcon_winxp.bmp
-
Sys/Skins/Warning48.bmp
-
Sys/Skins/login.jpg
-
Sys/SpamRules.rul
-
Sys/dao360.dll
740d7cb11304862970f49454448a6e33
Headers
Imports
Exports
Sections
-
Sys/libzddbx.dll
Headers
Exports
Sections
-
Sys/ssltype.ini
-
UnInstall.exe
Headers
Sections
-
$PLUGINSDIR/LangDLL.dll
2db813254ea8b4d2a92d703ecb659f39
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/NotifyIcon.dll
3fcf8c4eeb6afa0c9acb0e2001594da5
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/System.dll
4ec328f99bdd944fc98d8a5cf11f7a62
Headers
Imports
Exports
Sections
-
$PLUGINSDIR/modern-header.bmp
-
out.upx
Headers
Sections
-
WebMail.ini
-
libeay32.dll
Headers
Exports
Sections
-
out.upx
Headers
Sections
-
ssleay32.dll
Headers
Exports
Sections
-
stationery/GRAY.JPG
-
stationery/GREEN.JPG
-
stationery/ListDefault.bmp
-
stationery/ListDefault1.bmp
-
stationery/ListDefault2.bmp
-
stationery/PINK.JPG
-
stationery/classical.jpg
-
stationery/dune.jpg
-
stationery/feast.jpg
-
stationery/flower.jpg
-
stationery/leaf.gif
-
stationery/nature.jpg
-
stationery/page1.jpg
-
stationery/serenity.jpg
-
stationery/tech.gif
-
templet/default/Big5.ini
-
templet/default/Breeze light cloud is thin/Autumn.DHM
-
email-html-2.txt
-
templet/default/Breeze light cloud is thin/Elegantly simple.DHM
-
attachment-10
-
email-html-2.txt
-
templet/default/Breeze light cloud is thin/Good recently.DHM
-
attachment-6
-
attachment-7
-
email-html-2.txt
-
templet/default/Breeze light cloud is thin/Home town.DHM
-
attachment-5
-
email-html-2.txt
-
templet/default/Breeze light cloud is thin/One cup tea.DHM
-
attachment-3
-
attachment-4
-
attachment-5
-
attachment-6
-
email-html-2.txt
-
templet/default/Breeze light cloud is thin/Spring,such as arethusa.DHM
-
email-html-2.txt
-
templet/default/Breeze light cloud is thin/Spring.DHM
-
email-html-2.txt
-
templet/default/Breeze light cloud is thin/Summer lemon.DHM
-
templet/default/Breeze light cloud is thin/Summer.DHM
-
templet/default/Breeze light cloud is thin/The dim moonlight if fog.DHM
-
templet/default/Breeze light cloud is thin/The leaf falls to think an autumn.DHM
-
templet/default/Breeze light cloud is thin/Winter.DHM
-
templet/default/Business-Like/Approved.DHM
-
templet/default/Business-Like/Blue Slate Grid.DHM
-
templet/default/Business-Like/Cream Stripes.DHM
-
templet/default/Business-Like/Floral Azure.DHM
-
templet/default/Business-Like/Light Blue Stripes.DHM
-
templet/default/Business-Like/Mocca Weave.DHM
-
templet/default/Business-Like/Not Approved.DHM
-
templet/default/Business-Page/Business-Page-1.DHM
-
templet/default/Business-Page/Business-Page-2.DHM
-
templet/default/Business-Page/Business-Page-3.DHM
-
templet/default/Business-Page/Business-Page-4.DHM
-
templet/default/Butterflies/Butterfly Lace.DHM
-
templet/default/Butterflies/Tropical Colors.DHM
-
templet/default/Cartoon/Dog.DHM
-
templet/default/Cartoon/Ego.DHM
-
templet/default/Cartoon/Gold color touch.DHM
-
templet/default/Cartoon/Kiwi.DHM
-
templet/default/Cartoon/Lonesome and small bear.DHM
-
templet/default/Cartoon/The dream of the hover.DHM
-
templet/default/Clouds/Dreamy Sunset.DHM
-
templet/default/Clouds/Endless Sky.DHM
-
templet/default/Clouds/Ocean Sunrise.DHM
-
templet/default/Clouds/Partly Cloudy.DHM
-
templet/default/Clouds/Ray Streaks.DHM
-
templet/default/Clouds/Tropical Dusk.DHM
-
templet/default/Dolphins/Deep Blue.DHM
-
templet/default/Dolphins/Hugging Dolphins.DHM
-
templet/default/Good Morning/Bouncing Rays.DHM
-
templet/default/Good Morning/Bouncing Rays.DHM.tortoise.removed
-
templet/default/Good Morning/Dark Coffee.DHM
-
templet/default/Good Morning/Dark Coffee.DHM.tortoise.removed
-
templet/default/Good Morning/Light Coffee.DHM
-
templet/default/Good Morning/Light Coffee.DHM.tortoise.removed
-
templet/default/Happy birthday/Happy birthday-1.DHM
-
templet/default/Happy birthday/Happy birthday-2.DHM
-
templet/default/Happy birthday/Happy birthday-3.DHM
-
templet/default/Happy birthday/Happy birthday-4.DHM
-
templet/default/Happy birthday/Happy birthday-5.DHM
-
templet/default/Hello's/Bright Stars.DHM
-
templet/default/Hello's/Saying Hello.DHM
-
templet/default/Hi Tech/Musical Notes.DHM
-
templet/default/Hi Tech/Sphere Cycle.DHM
-
templet/default/Hi Tech/Spiral Sight.DHM
-
templet/default/Moods/Bloodshot.DHM
-
templet/default/Moods/For You.DHM
-
templet/default/Moods/Happy Bunch.DHM
-
templet/default/Moods/Happy Grin.DHM
-
templet/default/Moods/Have a nice day.DHM
-
templet/default/Moods/Rainbow.DHM
-
templet/default/Moods/Shaken Up.DHM
-
templet/default/Moods/Smiling At You.DHM
-
templet/default/Over the rainbow/Bless.DHM
-
templet/default/Over the rainbow/Feeling of love day.DHM
-
templet/default/Over the rainbow/Free.DHM
-
templet/default/Over the rainbow/If heart rain rain.DHM
-
templet/default/Over the rainbow/Love you 99.DHM
-
templet/default/Over the rainbow/Miss you.DHM
-
templet/default/Over the rainbow/Smell fragrance of flower lightly.DHM
-
templet/default/Over the rainbow/Star month.DHM
-
templet/default/Over the rainbow/Star sky under of wish.DHM
-
templet/default/Over the rainbow/The month flutter.DHM
-
templet/default/Over the rainbow/The powder color remember.DHM
-
templet/default/Over the rainbow/The quiet night think.DHM
-
templet/default/Over the rainbow/Thin if deep thoughts.DHM
-
templet/default/Over the rainbow/only love.DHM
-
templet/default/Peek-A-Boo/Hey There.DHM
-
templet/default/Peek-A-Boo/Wally's Waiting.DHM
-
templet/default/Week Days/Affable Monday.DHM
-
templet/default/Week Days/Dainty Tuesday.DHM
-
templet/default/Week Days/Fine Wednesday.DHM
-
templet/default/Week Days/Ideal Thursday.DHM
-
templet/default/Week Days/Lovely Friday.DHM
-
templet/default/Week Days/Noble Saturday.DHM
-
templet/default/Week Days/Suave Sunday.DHM
-
templet/default/fr.ini
-
templet/default/gb.ini