General

  • Target

    cdfc615911c66ffce2373f8987217a60_JaffaCakes118

  • Size

    1.4MB

  • MD5

    cdfc615911c66ffce2373f8987217a60

  • SHA1

    b1ec0020db6d55466774e074fbb3244a40671f0e

  • SHA256

    8ddadb92e141a716d58978c7cbfba33c506453cb9906e57102f6fc0e294f52eb

  • SHA512

    0a1eb99781f9b135f17862d553776d285b88b0401c40672dae0b283a23b2defe87d97627a1f391e047f69917002d3291d9842b507878abd34713d8fc76305dfe

  • SSDEEP

    24576:C2oZIrlZPv3tBEJyfkEYEAM3g1QT+8euN1s+YmEDP/Fa25rkdWcVtqm5ZvnrO:ds0fzYzag1QC8eyGRmO3I25AzVt1nC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • cdfc615911c66ffce2373f8987217a60_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    37c0608f24ea4f5b69005df26d5dd626


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INSTALLOPTIONS.DLL
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KILLPROCDLL.DLL
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/STARTMENU.DLL
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SYSTEM.DLL
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsWeb.dll
    .dll windows:4 windows x86 arch:x86

    d12ed83df3a4aa87887f14a225ff95d4


    Headers

    Imports

    Exports

    Sections

  • $PROGRAM_FILES/Baidu/bar/BaiduBar.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    1a0b6a1a360f8a892bb1ff119220b438


    Headers

    Imports

    Exports

    Sections

  • $PROGRAM_FILES_COMMON/NSISLog/Lang2052.DAT
    .exe windows:4 windows x86 arch:x86

    d31173ca8ec2d5e26170e3b96a28428f


    Headers

    Imports

    Sections

  • DiskView.EXE
    .exe windows:1 windows x86 arch:x86

    6f59b7d38eb8fe6ec36d9ad8e702ff62


    Headers

    Imports

    Exports

    Sections

  • File,Diz.ThX
    .exe windows:4 windows x86 arch:x86

    3c0e70bfa5f73f1f1cef484e2bcb5bf8


    Headers

    Imports

    Sections

  • HDI.EXE
    .exe windows:4 windows x86 arch:x86

    60dc867c88aacee19586e1274e815de2


    Headers

    Imports

    Sections

  • Lang2052.DAT
    .exe windows:4 windows x86 arch:x86

    d31173ca8ec2d5e26170e3b96a28428f


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    37c0608f24ea4f5b69005df26d5dd626


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KILLPROCDLL.DLL
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PROGRAM_FILES/Baidu/bar/BaiduBar.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    1a0b6a1a360f8a892bb1ff119220b438


    Headers

    Imports

    Exports

    Sections

  • $PROGRAM_FILES_COMMON/NSISLog/File,Diz.ThX
    .exe windows:4 windows x86 arch:x86

    3c0e70bfa5f73f1f1cef484e2bcb5bf8


    Headers

    Imports

    Sections

  • ⷴ.URL
  • ػŶ[SLT].URL