General

  • Target

    ce9145e09253463f32c785c20dcc8d7f_JaffaCakes118

  • Size

    1.7MB

  • MD5

    ce9145e09253463f32c785c20dcc8d7f

  • SHA1

    c500451903ddee0004f23ca079926174a0ff29d7

  • SHA256

    c71447b413591c215ef7a47ddd315e84512c3fa7e5aece33001be700a14269b8

  • SHA512

    a3fcf8b1ccb509dc10a4429d3fae57351b5f065bff03b242fb04891ff9a5b46dc500e68776c0a3e8271f6bb855461165726b309a128029f8aa9d57329f0df3c6

  • SSDEEP

    24576:TLvFN+iXw3eGNAbJy1qaI2z2YtZ1H90zTGf3SRbfEC4eE0p4hOQns3Vr/U7kIKQy:H+9nNANjaI2iaZMTrRbsCrE0qHiL1w8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • ce9145e09253463f32c785c20dcc8d7f_JaffaCakes118
    .rar
  • 163pan_1.0.0.1.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WmiInspector.dll
    .dll windows:4 windows x86 arch:x86

    35e8b490cb254ba4b70b06fe54a9dae6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 163pan.exe
    .exe windows:4 windows x86 arch:x86

    d3ca931154e36b7e485552764e56e9ee


    Headers

    Imports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • c:/Program Files/Google/Google Gears/$R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    f06d42768c3dc8050ca9c46449b3da1b


    Headers

    Imports

    Exports

    Sections

  • c:/Program Files/Google/Google Gears/$R2/NSIS.Library.RegTool.v2.$_4_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • c:/Program Files/Google/Google Gears/Internet Explorer/0.5.33.0/crash_sender.exe
    .exe windows:4 windows x86 arch:x86

    33aebec1faa371353d45faa161380543


    Headers

    Imports

    Sections

  • c:/Program Files/Google/Google Gears/Internet Explorer/0.5.33.0/gears.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f06d42768c3dc8050ca9c46449b3da1b


    Headers

    Imports

    Exports

    Sections

  • c:/Program Files/Google/Google Gears/Internet Explorer/0.5.33.0/vista_broker.exe
    .exe windows:4 windows x86 arch:x86

    98716dfb9551f048d4e0c6f57d42ac66


    Headers

    Imports

    Sections

  • c:/Program Files/Google/Google Gears/Shared/0.5.33.0/crash_sender.exe
    .exe windows:4 windows x86 arch:x86

    33aebec1faa371353d45faa161380543


    Headers

    Imports

    Sections

  • cfg.ini
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • update.exe
    .exe windows:4 windows x86 arch:x86

    88342d99f5b12d927afb3aea96efa927


    Headers

    Imports

    Sections

  • welcome.html
    .html .js polyglot
  • 新云软件.url
    .url