General

  • Target

    c7983463f151721a25a333aa32597e31_JaffaCakes118

  • Size

    3.5MB

  • MD5

    c7983463f151721a25a333aa32597e31

  • SHA1

    f0925921a0943f5c6b8071c66e8aa4b1838623b8

  • SHA256

    352651e448af23a15b5580b89ce40144c19dff7a43de2b8daeb9d1f90eb3a895

  • SHA512

    fdbc12effc42d71e4ea65c350da45659a49b9ecd0047f57b2b56eedddd7e8d57e6b922938b7c90f367a331ac3d9697282229a43f2cef27d43fe6653da12e0a85

  • SSDEEP

    98304:F9KMSVx5TWwbjmOdXJ6+lU8i3VQOo01U+KHP8pon:F9i5SUTdZ6+lNiqU1U+urn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • c7983463f151721a25a333aa32597e31_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/sqlzidongbeifen.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • dbmssocn.dll
    .dll windows:4 windows x86 arch:x86

    0308deee9f67f74385166e56fb5d1431


    Headers

    Imports

    Exports

    Sections

  • dbnetlib.dll
    .dll windows:5 windows x86 arch:x86

    ad360252cbae41f069ad9fdc23286b74


    Headers

    Imports

    Exports

    Sections

  • dbnmpntw.dll
    .dll windows:5 windows x86 arch:x86

    55dad475c99479340c2fa22b29dc46e2


    Headers

    Imports

    Exports

    Sections

  • ini/backup.ini
  • ini/backupset.ini
  • libjcc.dll
    .dll windows:4 windows x86 arch:x86

    98596f3e5d37e9c19b26b7b51d9ef9fd


    Headers

    Imports

    Exports

    Sections

  • libjsybheap.dll
    .dll windows:4 windows x86 arch:x86

    cd185ae96e493c13224d6c93f6fa483f


    Headers

    Imports

    Exports

    Sections

  • mssqlbak.dll
    .dll windows:1 windows x86 arch:x86

    a31bc3202e532dc3b6c16da7cb4382a8


    Headers

    Imports

    Exports

    Sections

  • mssqlbak.exe
    .exe windows:1 windows x86 arch:x86

    699035716eff0f4cbc45b97c4ff099a5


    Headers

    Imports

    Sections

  • mssqlbak.exe.manifest
  • ntwdblib.dll
    .dll windows:4 windows x86 arch:x86

    6844cfb6e32d89a609393587b4609cb4


    Headers

    Imports

    Exports

    Sections

  • pbdwe90.dll
    .dll windows:4 windows x86 arch:x86

    9798a64cf49f5c0685e7495494887d11


    Headers

    Imports

    Exports

    Sections

  • pbmss90.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    431a7249710495af97317169bd47d2c1


    Headers

    Imports

    Exports

    Sections

  • pbvm90.dll
    .dll windows:4 windows x86 arch:x86

    488a02bfb552cd3f3de7ad4be6b3e52c


    Headers

    Imports

    Exports

    Sections

  • pic/Apps.ico
  • pic/Cmm.ico
  • pic/Fontsd.ico
  • pic/PAGESETU.BMP
  • pic/Script.ico
  • pic/Systemd.ico
  • pic/TIME.BMP
  • pic/Thumbs.db
  • pic/email.bmp
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • xt_toolbar.dll
    .dll windows:1 windows x86 arch:x86

    ce9553555bf46f06b36a2bff16ca2437


    Headers

    Imports

    Exports

    Sections

  • yitesoft.url
  • ʹ˵.txt