General

  • Target

    ce062dd899bfad71ca4cdc1b4353872d_JaffaCakes118

  • Size

    11.8MB

  • MD5

    ce062dd899bfad71ca4cdc1b4353872d

  • SHA1

    c738f0c5c2bacaf5d071425e9e38eecae5f513e1

  • SHA256

    7e34a51c3abf02e9a3236ca95e9650c77dab31242731e7a1a708a0d76b99a24d

  • SHA512

    7c1426de653117dabb70daab0edf1da1d39cd638e77bca618382fe84109fc5a20ec664afd67cbb83ee6ed1538764212e7700bff313e3aa0d5c5d5d2c788496b4

  • SSDEEP

    196608:j1TKBWuUBTuknlgihaAFyDbBKMsDdxnBmGHAgdN8jhSMbY7ZdupI3kDewmXUEq/Y:j1TKtUYihNyYbx+LeN8jnbYqpIUKwmlR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • ce062dd899bfad71ca4cdc1b4353872d_JaffaCakes118
    .rar
  • Face/0.gif
    .gif
  • Face/1.gif
    .gif
  • Face/10.gif
    .gif
  • Face/100.gif
    .gif
  • Face/101.gif
    .gif
  • Face/102.gif
    .gif
  • Face/103.gif
    .gif
  • Face/104.gif
    .gif
  • Face/105.gif
    .gif
  • Face/106.gif
    .gif
  • Face/107.gif
    .gif
  • Face/108.gif
    .gif
  • Face/109.gif
    .gif
  • Face/11.gif
    .gif
  • Face/110.gif
    .gif
  • Face/111.gif
    .gif
  • Face/112.gif
    .gif
  • Face/113.gif
    .gif
  • Face/114.gif
    .gif
  • Face/115.gif
    .gif
  • Face/116.gif
    .gif
  • Face/117.gif
    .gif
  • Face/118.gif
    .gif
  • Face/119.gif
    .gif
  • Face/12.gif
    .gif
  • Face/120.gif
    .gif
  • Face/121.gif
    .gif
  • Face/122.gif
    .gif
  • Face/123.gif
    .gif
  • Face/124.gif
    .gif
  • Face/125.gif
    .gif
  • Face/126.gif
    .gif
  • Face/127.gif
    .gif
  • Face/128.gif
    .gif
  • Face/129.gif
    .gif
  • Face/13.gif
    .gif
  • Face/130.gif
    .gif
  • Face/131.gif
    .gif
  • Face/132.gif
    .gif
  • Face/133.gif
    .gif
  • Face/134.gif
    .gif
  • Face/14.gif
    .gif
  • Face/15.gif
    .gif
  • Face/16.gif
    .gif
  • Face/17.gif
    .gif
  • Face/18.gif
    .gif
  • Face/19.gif
    .gif
  • Face/2.gif
    .gif
  • Face/20.gif
    .gif
  • Face/21.gif
    .gif
  • Face/22.gif
    .gif
  • Face/23.gif
    .gif
  • Face/24.gif
    .gif
  • Face/25.gif
    .gif
  • Face/26.gif
    .gif
  • Face/27.gif
    .gif
  • Face/28.gif
    .gif
  • Face/29.gif
    .gif
  • Face/3.gif
    .gif
  • Face/30.gif
    .gif
  • Face/31.gif
    .gif
  • Face/32.gif
    .gif
  • Face/33.gif
    .gif
  • Face/34.gif
    .gif
  • Face/35.gif
    .gif
  • Face/36.gif
    .gif
  • Face/37.gif
    .gif
  • Face/38.gif
    .gif
  • Face/39.gif
    .gif
  • Face/4.gif
    .gif
  • Face/40.gif
    .gif
  • Face/41.gif
    .gif
  • Face/42.gif
    .gif
  • Face/43.gif
    .gif
  • Face/44.gif
    .gif
  • Face/45.gif
    .gif
  • Face/46.gif
    .gif
  • Face/47.gif
    .gif
  • Face/48.gif
    .gif
  • Face/49.gif
    .gif
  • Face/5.gif
    .gif
  • Face/50.gif
    .gif
  • Face/51.gif
    .gif
  • Face/52.gif
    .gif
  • Face/53.gif
    .gif
  • Face/54.gif
    .gif
  • Face/55.gif
    .gif
  • Face/56.gif
    .gif
  • Face/57.gif
    .gif
  • Face/58.gif
    .gif
  • Face/59.gif
    .gif
  • Face/6.gif
    .gif
  • Face/60.gif
    .gif
  • Face/61.gif
    .gif
  • Face/62.gif
    .gif
  • Face/63.gif
    .gif
  • Face/64.gif
    .gif
  • Face/65.gif
    .gif
  • Face/66.gif
    .gif
  • Face/67.gif
    .gif
  • Face/68.gif
    .gif
  • Face/69.gif
    .gif
  • Face/7.gif
    .gif
  • Face/70.gif
    .gif
  • Face/71.gif
    .gif
  • Face/72.gif
    .gif
  • Face/73.gif
    .gif
  • Face/74.gif
    .gif
  • Face/75.gif
    .gif
  • Face/76.gif
    .gif
  • Face/77.gif
    .gif
  • Face/78.gif
    .gif
  • Face/79.gif
    .gif
  • Face/8.gif
    .gif
  • Face/80.gif
    .gif
  • Face/81.gif
    .gif
  • Face/82.gif
    .gif
  • Face/83.gif
    .gif
  • Face/84.gif
    .gif
  • Face/85.gif
    .gif
  • Face/86.gif
    .gif
  • Face/87.gif
    .gif
  • Face/88.gif
    .gif
  • Face/89.gif
    .gif
  • Face/9.gif
    .gif
  • Face/90.gif
    .gif
  • Face/91.gif
    .gif
  • Face/92.gif
    .gif
  • Face/93.gif
    .gif
  • Face/94.gif
    .gif
  • Face/95.gif
    .gif
  • Face/96.gif
    .gif
  • Face/97.gif
    .gif
  • Face/98.gif
    .gif
  • Face/99.gif
    .gif
  • Face/新云软件.url
    .url
  • OFFICE之星官方网站.url
  • images/2008102418354632.jpg
    .jpg
  • images/favicon.ico
  • images/foot.jpg
    .jpg
  • images/keji2_112.jpg
    .jpg
  • images/pic_1.jpg
    .jpg
  • images/pic_2.gif
    .gif
  • images/pic_3.gif
    .gif
  • images/pic_4.jpg
    .jpg
  • images/topbg.jpg
    .jpg
  • include/u1top.html
    .html
  • include/u2top.html
    .html
  • other/FunshionInstall_C55026.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstPath.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    d79c2fe1aafe446fbd9b984f61377e3e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WelcomePage.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86

    e57536e0d3500471d52df7cea0d65a39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PROFILE/funshion.ini
  • $PROFILE/funshion/Cacheflash/blankFs.swf
  • $PROFILE/funshion/Cacheflash/donghua1_16.swf
  • $PROFILE/funshion/Cacheflash/donghua3_18.swf
  • $PROFILE/funshion/flash-1.swf
  • $SYSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    d52e386cb07e1e13a6b9de526bbe1d78


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/aac_parser.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    59b98f265f7511c5286a6c9a4f36cddd


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/funshion.ini
  • $SYSDIR/rmsp.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    f25cc945c2d756198bd6c7a975e31619


    Headers

    Imports

    Exports

    Sections

  • $TEMP/LegendLog.ini
  • $TEMP/blank.bmp
  • $TEMP/funshion.ini
  • $TEMP/getmacaddress.dll
    .dll windows:5 windows x86 arch:x86

    c32bcf78f4f0a2f4e84bcb8498a25c4c


    Headers

    Imports

    Exports

    Sections

  • $TEMP/installfilescn2.bmp
  • $TEMP/installfilescn3.bmp
  • $TEMP/installfilesen2.bmp
  • $TEMP/installfilesen3.bmp
  • $TEMP/installpathcn.bmp
  • $TEMP/installpathen.bmp
  • $TEMP/instpath.ini
  • $TEMP/licensecn.bmp
  • $TEMP/licenseen.bmp
  • $TEMP/welcome.bmp
  • $TEMP/welcomepage.ini
  • CrashReport.exe
    .exe windows:4 windows x86 arch:x86

    12a94abcb28defef504a47e3b83ef26c


    Code Sign

    Headers

    Imports

    Sections

  • Funshion.exe
    .exe windows:4 windows x86 arch:x86

    8b8d329f33e7d5c21d5fdc96551206d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FunshionImg.jpg
    .jpg
  • GetMACAddress.dll
    .dll windows:5 windows x86 arch:x86

    c32bcf78f4f0a2f4e84bcb8498a25c4c


    Headers

    Imports

    Exports

    Sections

  • LangResEnAmerican.dll
    .dll windows:4 windows x86 arch:x86

    22b98c5c8c68a5c45b232e3b1c1c06e3


    Headers

    Imports

    Sections

  • PauseWebCloseBtn.bmp
  • RouterSetting.dll
    .dll windows:4 windows x86 arch:x86

    189c56c732ac9c83a731ef761eaf019b


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe.nsis
  • WMVCORE.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    93ffa084929ccbb3d7c99014a7547237


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XPSP2Patch/FunshionInstall.exe
    .exe windows:4 windows x86 arch:x86

    c26551a8ec5b5d9de8297b0123f45a82


    Code Sign

    Headers

    Imports

    Sections

  • XPSP2Patch/InstallLangAm.dll
    .dll windows:4 windows x86 arch:x86

    22b98c5c8c68a5c45b232e3b1c1c06e3


    Headers

    Imports

    Sections

  • XPSP2Patch/bmps/3.bmp
  • XPSP2Patch/bmps/4.bmp
  • XPSP2Patch/bmps/5.bmp
  • XPSP2Patch/bmps/Dialog.bmp
  • XPSP2Patch/bmps/ch_fin.bmp
  • XPSP2Patch/bmps/ch_rcmd.bmp
  • XPSP2Patch/bmps/en_fin.bmp
  • XPSP2Patch/bmps/en_rcmd.bmp
  • XPSP2Patch/evid4226-vc80-mt.exe
    .exe windows:4 windows x86 arch:x86

    110b471245a9228f6f7e0ded8618f81d


    Code Sign

    Headers

    Imports

    Sections

  • cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • funshionplugin2.dll
    .dll windows:4 windows x86 arch:x86

    dac51e8b9eff82b627c3b7616e2735a5


    Headers

    Imports

    Exports

    Sections

  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • pndx5016.dll
  • pndx5032.dll
    .dll windows:4 windows x86 arch:x86

    3dff24d172f5031d837d000fcf3a81f8


    Headers

    Imports

    Exports

    Sections

  • quality.dll
    .dll windows:4 windows x86 arch:x86

    e4c9eb785b3f5559279841b7cc045a9d


    Headers

    Imports

    Exports

    Sections

  • rmoc3260.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    856609e709a6cabc2acd456e10aed0e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wmasf.dll
    .dll windows:5 windows x86 arch:x86

    f5ff989df3991d98134d8365e6abd655


    Headers

    Imports

    Exports

    Sections

  • xmllite.dll
    .dll windows:5 windows x86 arch:x86

    d6e6199223a8b2491473804dccbae6db


    Headers

    Imports

    Exports

    Sections

  • other/pipi_204_146252.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 安装.exe
    .exe windows:4 windows x86 arch:x86

    8f244019e52c417786599750d44c515a


    Headers

    Imports

    Sections

  • 更新说明.txt