Overview

overview

7

Static

static

3

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

KqConfig 2.5.5.6.exe

windows7-x64

7

KqConfig 2.5.5.6.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ck.dll

windows7-x64

1

$PLUGINSDI...ck.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDIR/OnTop.dll

windows7-x64

3

$PLUGINSDIR/OnTop.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ps.dll

windows7-x64

3

$PLUGINSDI...ps.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfb475718fd0436c53894f1f903a7ab9_JaffaCakes118

  • Size

    9.1MB

  • MD5

    bfb475718fd0436c53894f1f903a7ab9

  • SHA1

    31d5d64a1298fef7f7926de15c829dff1e7f5c3b

  • SHA256

    08d63e647730ffa75049d080a1d605b65c1b96107aa75e667a98218fc126e210

  • SHA512

    3f23740a286814ad23535904317d722aa9d0fbfee11c13c357133fee6c1e6cb224e0be6e4a235d362820c61ca44d153506e8b1ccd930db9fa221fe7ad918e8ae

  • SSDEEP

    196608:IrFLfBQDfp75gLcrUivxziHhIiZpT6PrcaJkab2:sfBQ7p75gOUixixZkPrcaJrb2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • bfb475718fd0436c53894f1f903a7ab9_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • KqConfig 2.5.5.6.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Banner.dll
    .dll windows:4 windows x86 arch:x86

    7a3709b093081d5614be1eaa2fe7fe76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ButtonLinker.dll
    .dll windows:4 windows x86 arch:x86

    8466b6530f29387ac28e94fe1e74b98f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Codejock.cjstyles
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/Dialogs.dll
    .dll windows:4 windows x86 arch:x86

    fabdc65c1d379dce4d4cd275c3bfc12e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/EBanner.dll
    .dll windows:4 windows x86 arch:x86

    c759d72719f57a6b126c48a6fe97f6e7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ISSkinEx.dll
    .dll windows:4 windows x86 arch:x86

    ab1325009613fa1f4b41f6b6e5c740d7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NotifyIcon.dll
    .dll windows:4 windows x86 arch:x86

    e043e246d8abcbb9de2ad82c6e18cd88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OnTop.dll
    .dll windows:4 windows x86 arch:x86

    5868b2e27b7dc96acf77699398b4c95b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_splash.GIF
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ToolTips.dll
    .dll windows:4 windows x86 arch:x86

    04338c58e26f4ac6ae89608ac6276429


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ads.htm
    .html .js polyglot
  • $PLUGINSDIR/config.ini
  • $PLUGINSDIR/dir.ini
  • $PLUGINSDIR/inst.bmp
  • $PLUGINSDIR/killad.ini
  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86

    e57536e0d3500471d52df7cea0d65a39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    eee37c14e102da3f62385f9796c701ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWeb.dll
    .dll windows:4 windows x86 arch:x86

    d12ed83df3a4aa87887f14a225ff95d4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWindows$_0_.dll
    .dll windows:4 windows x86 arch:x86

    8baa37b4b9803e205026a5e2d38eebac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWindows.dll
    .dll windows:4 windows x86 arch:x86

    8baa37b4b9803e205026a5e2d38eebac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pgc.bmp
  • $PLUGINSDIR/pgl.bmp
  • $PLUGINSDIR/pgx.bmp
  • $PLUGINSDIR/qec.bmp
  • $PLUGINSDIR/qel.bmp
  • $PLUGINSDIR/qex.bmp
  • $PLUGINSDIR/titprog.dll
    .dll windows:4 windows x86 arch:x86

    bc76589591a6d4b39c0cfdd5d6b8b793


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tuopan.ini
  • $PLUGINSDIR/waterctrl.dll
    .dll windows:4 windows x86 arch:x86

    cd2ffec7e2da8a6dd4a84791a95597a7


    Headers

    Imports

    Exports

    Sections

  • $_67_/Misc/Sound/Classic/Audio.wav
  • $_67_/Misc/Sound/Classic/Global.wav
  • $_67_/Misc/Sound/Classic/MSG.WAV
  • $_67_/Misc/Sound/Classic/SHAKE.WAV
  • $_67_/Misc/Sound/Classic/SYSTEM.WAV
  • $_67_/Plugin/Com.Tencent.PaiPai/Misc/Sound/PaiPaiMsg.wav