Overview

overview

7

Static

static

3

TCPOptimizerSetup.exe

windows7-x64

7

TCPOptimizerSetup.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

BD.exe

windows7-x64

7

BD.exe

windows10-2004-x64

7

TCPOptimizer.exe

windows7-x64

3

TCPOptimizer.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$TEMP/BaiDuAD.exe

windows7-x64

7

$TEMP/BaiDuAD.exe

windows10-2004-x64

7

Blog.url

windows7-x64

1

Blog.url

windows10-2004-x64

1

.rtf

windows7-x64

4

.rtf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0eed07bf5df706821b0b37e6b454073_JaffaCakes118

  • Size

    948KB

  • MD5

    c0eed07bf5df706821b0b37e6b454073

  • SHA1

    8f0e3fe826434e933d35761425f1866bf6fa14d4

  • SHA256

    8aefe6103ca1bd7a94e8f228df6c478086d4fb617d702c7bea40aa31135c3eca

  • SHA512

    b653a9378dd6d89856652574e9d8f055ee884bb11b842151e424c9f648d74f78d9b3d1cbc112ede1f517114d8d8b3aa913901062bbb2d841045d8027aa3ef592

  • SSDEEP

    24576:XpwU+llzy4hDRyuQGoMu6H8yd4r8fu8zbZuNWnlVZDyjQo2p:XpD+P/RcuQSuN+nzb5nlVbo2p

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • c0eed07bf5df706821b0b37e6b454073_JaffaCakes118
    .rar
  • Capture1.gif
    .gif
  • TCPOptimizerSetup.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • BD.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • TCPOptimizer.exe
    .exe windows:4 windows x86 arch:x86

    b8af6375a8e13debcb5320ce2442d84a


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • $TEMP/BaiDuAD.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • Blog.url
  • ˵.txt
  • .rtf
    .rtf
  • 下载说明.htm
    .html .js polyglot
  • 汉化说明.txt