General

  • Target

    c16fad68c19c240a9730ac2efcce745e_JaffaCakes118

  • Size

    21.6MB

  • MD5

    c16fad68c19c240a9730ac2efcce745e

  • SHA1

    5e2da9eba56489ce164243e73c8404ce993b3164

  • SHA256

    6a9ec76eb4844f99593016949c027b13ac8e4b468a1866f6fa97c266305540ce

  • SHA512

    eac4ea758a28436c5fae7fe94fcead4ba351612024bb1528e00c7651ebb5a30c46e1f804ed94d92835c7f8ac13fab79436d45b3300ebbd164c598fa06c5ee506

  • SSDEEP

    393216:kv6jCfa58A8pLb1HS2a8MSey5XFxVl9PkFe9u6ztuNafrs1gGT6wDJQ:kCmY8A6VS2j5ln7jsOGT7

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • c16fad68c19c240a9730ac2efcce745e_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    5efd74892a893f15c566623cc8a8cc76


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/0001.bmp
  • $PLUGINSDIR/0002.bmp
  • $PLUGINSDIR/0003.bmp
  • $PLUGINSDIR/0004.bmp
  • $PLUGINSDIR/0005.bmp
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProcDll.dll
    .dll windows:4 windows x86 arch:x86

    fc48f1867996469168a737dda79223c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Statistics.exe
    .exe windows:4 windows x86 arch:x86

    c2ca8c749efd139a74ece1566852cf56


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ADManage.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f7cad460f73f66c77935d462e78a3269


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppLaunch.prf
  • BugReporter.exe
    .exe windows:4 windows x86 arch:x86

    7eb076debb1bc582c331a3211e9f71b3


    Code Sign

    Headers

    Imports

    Sections

  • COPYING.GPLv3
  • COPYING.LGPLv3
  • ChannelMgr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2dbb56b7ddaf9e775602de5b5555b28f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Common.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    33d4898835ff42691109f3e9dbc50929


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DataManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d75962fa56bab7cf8a2ad045a5869dc7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DesktopHelper.dll
    .dll windows:4 windows x86 arch:x86

    357f6a6ffa9b44dc2f7090d9443d2a2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DesktopHelperX.dll
    .dll windows:4 windows x64 arch:x64

    ff526651f4ac3d1d5e5749075c6ac7b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Encrypt.dll
    .dll windows:4 windows x86 arch:x86

    47da59b804814b3aca9123d6dfe114e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GF.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    067a241b75f85b1720f830ab09f50af0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HEVCDecoder.dll
    .dll windows:4 windows x86 arch:x86

    a25feafdaec43d6489cfbf8f91bd9037


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HWDecoder.dll
    .dll windows:4 windows x86 arch:x86

    fd1d34b02b795f5dcc2a5781c5f1c105


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HttpModule.dll
    .dll windows:4 windows x86 arch:x86

    aea159028cdb222e0c787b71a642573d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IPC.dll
    .dll windows:4 windows x86 arch:x86

    b65a8523c8a635dcd7c92d15d287c71e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstAsm.exe
    .exe windows:4 windows x86 arch:x86

    bf6535af786405697a8295e4a1400021


    Code Sign

    Headers

    Imports

    Sections

  • InstallAsm/Microsoft.VC80.ATL/8.0.50727.4053.cat
  • InstallAsm/Microsoft.VC80.ATL/8.0.50727.4053.policy
    .xml
  • InstallAsm/Microsoft.VC80.ATL/ATL80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • InstallAsm/Microsoft.VC80.ATL/Microsoft.VC80.ATL.cat
  • InstallAsm/Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • InstallAsm/Microsoft.VC80.CRT/8.0.50727.4053.cat
  • InstallAsm/Microsoft.VC80.CRT/8.0.50727.4053.policy
    .xml
  • InstallAsm/Microsoft.VC80.CRT/Microsoft.VC80.CRT.cat
  • InstallAsm/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • InstallAsm/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • InstallAsm/Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstallAsm/Microsoft.VC80.CRT/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveAPI.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4ed258f11272a787d3bbe763e75ca5fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveDLNA.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b49648275c2af4cbc4c9ca7d21d20760


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveLog.dll
    .dll windows:4 windows x86 arch:x86

    727e1bef48b1717f0381f29013f2e42e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveLogin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b1f24eac11ee29821b988b45b3535df1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveMaster.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d96233a55e5831e3b78259928ebc3934


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveMedia.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b98b1287d23c4afc7a7790be887e2742


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveOcx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ae080b9577c1dfb89a1e107793d0465c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LivePlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    64e118bb82d6c070f4be20b81c661257


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveStream.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9a08e0b923511293ca3a3a9b54e0b3ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LiveVOD.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cbcef966011859c16242130df63fc715


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MMInstaller.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fe14efa60f8adeac0e249746a4882da2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MediaCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fe669197dbdfc89457a011df16730a04


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MediaSource.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    30b1075e7a316c62a6cda553c86079df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MiniTips.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    05bfaf4d8aca3ef7608b602bce64722d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OPWebKitClient.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8cd9a0f3039d66477028cf90e1c2c8df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OPWebKitCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f7d01d2b26718b9b04e88e1b8b79d8e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OcxHelper.exe
    .exe windows:4 windows x86 arch:x86

    a350128292bdb48435c70bda68b5bbb2


    Code Sign

    Headers

    Imports

    Sections

  • ProcessSession.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    37136f5e83d1bb5c893ebfa7e19ef1bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLive.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5fba6c89e33c2af5b65ef28dce6aa0ed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLive.exe
    .exe windows:4 windows x86 arch:x86

    f79aa588dce8331601bb3f78d13cdcd2


    Code Sign

    Headers

    Imports

    Sections

  • QQLive.tpc
  • QQLiveBrowser.exe
    .exe windows:4 windows x86 arch:x86

    daaf6d7aecbd89c84bd060a9f46d2486


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveCommu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6c42d26a75a7f448d132d0c86909e78e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveDownload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3c77a30accadba3976cf3bcc025961d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveDxDll.dll
    .dll windows:4 windows x86 arch:x86

    f392fdce2b8758ea06b631f12a06f5e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveEx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6370dc027de37d6cfa5697e52228c199


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveExternal.exe
    .exe windows:4 windows x86 arch:x86

    33bde54685a41d06d97f8420b2bc3401


    Code Sign

    Headers

    Imports

    Sections

  • QQLiveMainModule.dll
    .dll windows:4 windows x86 arch:x86

    46c34cf068ea4997825e8788ad6f2871


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveRenderer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e88de906219351441368e790d21b469


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQLiveUninstaller.exe.nsis
  • QQLiveUp.exe
    .exe windows:4 windows x86 arch:x86

    6851d05ebf0afc2baaf94897680f5bd5


    Code Sign

    Headers

    Imports

    Sections

  • Resource.rdb
  • SetupShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    541291d6e11c1aa75409fed7cf0da08f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Statistic.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5bf38d897b3379bc9e698a1914d60dd1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Statistics.exe
    .exe windows:4 windows x86 arch:x86

    c2ca8c749efd139a74ece1566852cf56


    Code Sign

    Headers

    Imports

    Sections

  • StreamIO.dll
    .dll windows:4 windows x86 arch:x86

    f3dd7ee4c296b605174b6cb4f4fbaa0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SysData/DLNAConnect.swf
  • SysData/HomePage4.swf
  • SysData/MediaPlugin.swf
  • SysData/Recommend3.swf
  • SysData/img/icon_warning.png
    .png
  • SysData/img/sprite.png
    .png
  • SysData/paypage_err.html
  • SysData/pip_channel_err.html
    .js
  • SysData/portal_err.html
  • SysData/programinfo_err.html
    .js
  • SysData/tips.swf
  • SysData/zoomin.cur
  • SysData/zoomout.cur
  • SysData/腾讯视频.url
    .url
  • TNProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3e1312f81e1880a7089194f148e0d58e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TSSafeEdit.dat
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TXSSO/I18N/2052/PGFStringBundle.xml
    .xml
  • TXSSO/I18N/2052/SSOStringBundle.xml
    .xml
  • TXSSO/I18N/SSOConfig.xml
    .xml
  • TXSSO/bin/SSOCommon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b6892bca8dfd702a8fe0a08ad32b5090


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TXSSO/bin/SSOLUIControl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0e880a85ae4dad9b2b74a3dfa55a3dfb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TXSSO/bin/SSOPlatform.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3d5873c57ad46da14bf50b351ba42c45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TXSSO/bin/npSSOAxCtrlForPTLogin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    160288086033c30eda798088b486a70e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ToolBox.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    990d18a15700f5c34b0e26bff02f0979


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Upgrade.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    42721650e6c0860f712343e89576dfcd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UserData.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b49b7fb32978958d4e75998be6121b7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VProcess.dll
    .dll windows:4 windows x86 arch:x86

    8a4a3d528fce241b0468d7195a83edf9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VideoMergeTool.dll
    .dll windows:4 windows x86 arch:x86

    f8b466b65b53959cf552e32b3c607ba1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Win7Feature.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7ff925d996e137195be0d4c93f71e563


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • X64Helper.exe
    .exe windows:4 windows x64 arch:x64

    c5d42453941b01bf0269de33bb925bde


    Code Sign

    Headers

    Imports

    Sections

  • arkGraphic.dll
    .dll windows:4 windows x86 arch:x86

    0e9e6bdbc777b921334b4e454e902a1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • arkIOStub.dll
    .dll windows:4 windows x86 arch:x86

    035865c038a769ffb5ad044b5b4c7efa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • arkIPC.dll
    .dll windows:4 windows x86 arch:x86

    7ea34d0a31bd91b22cc3daac273eb9b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • arkImage.dll
    .dll windows:4 windows x86 arch:x86

    ba767f4fb94e24b9d11bdb8e62d2d34a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avcodec-ql-54.dll
    .dll windows:4 windows x86 arch:x86

    d9960794c4ff895f6bfa0a602bf9a764


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avformat-ql-54.dll
    .dll windows:4 windows x86 arch:x86

    8455d305da783fc42c696adaa5b86d90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avresample-ql-1.dll
    .dll windows:4 windows x86 arch:x86

    03524759bdf0648b2b443018896281dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avutil-ql-52.dll
    .dll windows:4 windows x86 arch:x86

    819c8b24cd8c0b6cbff37d713a2a96a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cabarc.exe
    .exe windows:5 windows x86 arch:x86

    286c4a73c9ae31fbedb2b4e12f8feb6c


    Code Sign

    Headers

    Imports

    Sections

  • jgIOStub.dll
    .dll windows:4 windows x86 arch:x86

    035865c038a769ffb5ad044b5b4c7efa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jgImage.dll
    .dll windows:4 windows x86 arch:x86

    1248a4640f38674a23b216c2377bd3d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libHevc.dll
    .dll windows:4 windows x86 arch:x86

    915cdc74386b8abd1ae7b522ec24ce2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x86 arch:x86

    85a27f4cd6b68cce9e4a21cf2b1eeff5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libexpatw.dll
    .dll windows:4 windows x86 arch:x86

    000e7416bde1d6f083e2d66405b37109


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libjpegturbo.dll
    .dll windows:4 windows x86 arch:x86

    0faae8b3db4acc6d43ba0d41656ffa73


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libpng.dll
    .dll windows:4 windows x86 arch:x86

    11956b0c2bd4d57cf1fa6a23d5da7d02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • locales/zh-CN.pak
  • lua.dll
    .dll windows:4 windows x86 arch:x86

    d720963504b3c30acda465fb8d8e4284


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • npQQLive.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9c7a51a5c1ed045a78a9de23e6a3a8e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2papi.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a43db36ba47070377a9f1d2243b682d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2papp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    75b7c4a02066063c296406790863702a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2pcore.dll
    .dll windows:4 windows x86 arch:x86

    dc328ad394799bebf445cee7a91c6f30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2pdata.dll
    .dll windows:4 windows x86 arch:x86

    55619d846abfa5c2c79e773c34f6cd3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2phttp.dll
    .dll windows:4 windows x86 arch:x86

    9a4b5974957e490df0b50dbb1d9ffc57


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2plog.dll
    .dll windows:4 windows x86 arch:x86

    cac50c32003ff2bbc8214e3d97355e96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pthreadGC2.dll
    .dll windows:4 windows x86 arch:x86

    4ed4b97c004af0f3c95aeb69c247d60b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qqlive.ini
  • tinyxml.dll
    .dll windows:4 windows x86 arch:x86

    2524407d3051eac98e4560fe35989f1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • whatsnew.txt
  • xGraphic32.dll
    .dll windows:4 windows x86 arch:x86

    bee90c287829a3a0ac7728ae2f73d20a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xImage.dll
    .dll windows:4 windows x86 arch:x86

    674b21bc2989c82fb9cf8afb994f3265


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:4 windows x86 arch:x86

    962a4aa4b13b8b9e119492191014e772


    Code Sign

    Headers

    Imports

    Exports

    Sections