General

  • Target

    bf59ee4099e8744f47601bccf7111e81_JaffaCakes118

  • Size

    3.6MB

  • MD5

    bf59ee4099e8744f47601bccf7111e81

  • SHA1

    830175ab88fd2b0f29e086f38d42f67e8c3afb74

  • SHA256

    85409d7a2ade40ad0668f28d63b7ef39fb730df16574ee957c8db9e2b241cda3

  • SHA512

    34e9615ffa02d71c21716796bae75e33110949fc84d1d54a5859542a23a6c2d7e9559de46cd8b1a5081ed916bc548db01c49b5094911c00c3410dd6d8faf33f4

  • SSDEEP

    49152:MEQOqqWBnKwHE22ON5HuB63cYR5bztNoHFK/d67FMex5+JdbmQ6KkuiTD00zNt07:MO2nfz2eZWcBbztWQd6JMamwQ6HLsC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • bf59ee4099e8744f47601bccf7111e81_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Ad.exe
    .exe windows:4 windows x86 arch:x86

    3a8bee4a7464cd82bca0b8c043e5f05d


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/DownloadProxyPS.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b177dcb186702f9a4775e053e2fa1e17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/QQVipDownloader.exe
    .exe windows:4 windows x86 arch:x86

    76ae033ee18616f9c4fa679c0adcdd07


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Skin/SkinConfig.ini
  • $_2_/Skin/ad_exit.png
    .png
  • $_2_/Skin/bk.png
    .png
  • $_2_/Skin/btn_pause_task.png
    .png
  • $_2_/Skin/btn_resume_task.png
    .png
  • $_2_/Skin/btn_retry_task.png
    .png
  • $_2_/Skin/btn_setup.png
    .png
  • $_2_/Skin/btn_start_task.png
    .png
  • $_2_/Skin/btn_topspeed.png
    .png
  • $_2_/Skin/close.png
    .png
  • $_2_/Skin/dlg_bk.png
    .png
  • $_2_/Skin/dlg_bk_about.png
    .png
  • $_2_/Skin/dlg_bk_login.png
    .png
  • $_2_/Skin/dlg_btn.png
    .png
  • $_2_/Skin/dlg_checkbox_off.png
    .png
  • $_2_/Skin/dlg_checkbox_on.png
    .png
  • $_2_/Skin/dlg_close.png
    .png
  • $_2_/Skin/dlg_input.png
    .png
  • $_2_/Skin/dlg_open_vip.png
    .png
  • $_2_/Skin/file_path_input.png
    .png
  • $_2_/Skin/gift_box.png
    .png
  • $_2_/Skin/gift_tip_bk.png
    .png
  • $_2_/Skin/gift_tip_get.png
    .png
  • $_2_/Skin/icon_path.png
    .png
  • $_2_/Skin/icon_success.png
    .png
  • $_2_/Skin/list_bk.png
    .png
  • $_2_/Skin/menu_bk.png
    .png
  • $_2_/Skin/menu_hilight.png
    .png
  • $_2_/Skin/menu_seperator.png
    .png
  • $_2_/Skin/min.png
    .png
  • $_2_/Skin/progress_bk.png
    .png
  • $_2_/Skin/progress_fg.png
    .png
  • $_2_/Skin/setting.png
    .png
  • $_2_/Skin/tips_bk.png
    .png
  • $_2_/Skin/tips_game_acc.png
    .png
  • $_2_/Skin/tips_vip.png
    .png
  • $_2_/Skin/vip_off.png
    .png
  • $_2_/Skin/vip_on.png
    .png
  • $_2_/Skin/vipdl.ico
  • $_2_/SkinConfig.ini
  • $_2_/TXSSOSetup.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Tencentdl.exe
    .exe windows:4 windows x86 arch:x86

    555485ed0b309686c90411861f6dfd07


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/VerConfig.ini
  • $_2_/bugreport.exe
    .exe windows:4 windows x86 arch:x86

    4b9f98c3cc39d350cf2d92c792f53ef4


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/config.ini
  • $_2_/curllib.dll
    .dll windows:4 windows x86 arch:x86

    e7e76bacda92f81d0eefd0a58978a370


    Headers

    Imports

    Exports

    Sections

  • $_2_/dlcore.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    84f24142cdc33b2e9b18677314bfa3cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/extract.dll
    .dll windows:4 windows x86 arch:x86

    102033a12b8cf17a451a9e9760020138


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/tinyxml.dll
    .dll windows:4 windows x86 arch:x86

    2524407d3051eac98e4560fe35989f1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/tnproxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    10e96c81ba42657121a41ca1610a4458


    Code Sign

    Headers

    Imports

    Exports

    Sections