General

  • Target

    d0c830638a03b7da9d4f741a556523d2_JaffaCakes118

  • Size

    8.4MB

  • MD5

    d0c830638a03b7da9d4f741a556523d2

  • SHA1

    a1b8e14854fdcc1ed492a04679009cf1d6274289

  • SHA256

    9cb615fa6f3be42ca3296bc94c31392f6ec3c5b778a01d292996b550318edcbd

  • SHA512

    b89998ade0f4d5a0090d64a3e2eb51769e08dd1fea44ed3c39d82f43f3853859236cb1930f49bd6c3d23828e54a1cc4e36b82cb9664b95bfa7644afddce2158b

  • SSDEEP

    196608:3HgEUalrHgg09OL/65FYlOAybqJUW8s58EqujOcPsWUXfEbrhr2Ct0sff:XgMlrAn9Cg0/5OzjuicgX8r29Of

Score
3/10

Malware Config

Signatures

  • Unsigned PE 66 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d0c830638a03b7da9d4f741a556523d2_JaffaCakes118
    .rar
  • xpr1081188_xpr_3.2.1188.0.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/14_43260.dll
    .dll windows:4 windows x86 arch:x86

    10cc1c83f991b066cba98aa471df4e60


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/28_83260.dll
    .dll windows:4 windows x86 arch:x86

    3fde72e769c2ba8f88c009f3828dd015


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/cook3260.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/ddnt3260.dll
    .dll windows:4 windows x86 arch:x86

    8e95a27a8e4ba9b82ac29a5cadfb4a42


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/dnet3260.dll
    .dll windows:4 windows x86 arch:x86

    65180debf0fb8ca6111cc949978941cb


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/drv1.dll
    .dll windows:4 windows x86 arch:x86

    232d11e71e9db2c13e39696149eba4f6


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/drv2.dll
    .dll windows:4 windows x86 arch:x86

    44586b56c5dcc55b19268bed59258786


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/hxltcolor.dll
    .dll windows:4 windows x86 arch:x86

    155821e571b36aca7bf31baf9968f972


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/ra32clv1.dll
    .dll windows:4 windows x86 arch:x86

    57de0eddd18335303b3f121e01e339f6


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/ralf.dll
    .dll windows:4 windows x86 arch:x86

    ca3cf2dadfa161c51320288930144294


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/realmedia.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    f79bf9ac2177d3d25eeed41ffd8b9782


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/rv10.dll
    .dll windows:4 windows x86 arch:x86

    7d0bbca4dd169c4c1a33b2513aa5069d


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/rv20.dll
    .dll windows:4 windows x86 arch:x86

    de93a6d25a8e8a4317757a0f9e71593a


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/rv30.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/rv40.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/sipr.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/sipr3260.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • Components.1188/Microsoft.VC90.CRT.manifest
  • Components.1188/components.manifest
  • Components.1188/ijl15.dll
    .dll windows:4 windows x86 arch:x86

    43fd8fd13d2d05654de14de52b9d512d


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksaudio.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6e8b2a281bf8cb72b8be1d4e798154a3


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kscolor.dll
    .dll windows:5 windows x86 arch:x86

    18aa3457a522d8022bebe7029e809767


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksdemux.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    67c56c9b05d8feaf50c2f2c0c73a43a5


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksg723.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    055d2ff5d60ccff76e22b75396c8c58c


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kslivec.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c8fec468f742d99440deb784ff0715af


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksmtctrl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    89c7f4271d8812c89696d30debf39a0c


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksmtview.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    3437ee2aaf075d31767a94d23c2f39e4


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksppbase.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4d8723e61c82697cfd980255b00349e2


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksres.dll
    .dll windows:5 windows x86 arch:x86

    aa64158913f7d6b2f89d7025b9716b2e


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksresc.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    8d3db4e91e80006c3662bdb166a60c8c


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksrescc.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    e3007892db29f8882351c56ffcd125d5


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kssample.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    5d3161a46ec932dafee18ff40724022f


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksscreen.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    e306d3f1c7580d24c67ce83ae47631b3


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksscript.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6ae7c5827f94dbcb2eccfbbb13a67fb4


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksvideo.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c9d256b1e6a7e933045b4b5708eae70c


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksvmux.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    66d122e5a27c5520c0ff9867415149b4


    Headers

    Imports

    Exports

    Sections

  • Components.1188/ksvolume.dll
    .dll windows:5 windows x86 arch:x86

    aef58b4226d52f4aaca65064a8a69988


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kswmbase.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    e38b6458b7c4d9d99736b3e939d99640


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kswmedit.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    ef6d6faf0bb7247958dc4ce49ed4e606


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kswmmain.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    f704dac35faeebd414f5e13094ccb5e2


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kswmsour.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a9c94b7f747d0f7bfff59fac953182ac


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kswsock.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    3c3bd0b6260dea05869cdce8e29bcf29


    Headers

    Imports

    Exports

    Sections

  • Components.1188/kswvcl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    d42783a78c1a9b2326c0d56752a49ead


    Headers

    Imports

    Exports

    Sections

  • Components.1188/libavcodec.dll
    .dll windows:4 windows x86 arch:x86

    ad8abb2358f6f42d66abf1cebc5ee9bd


    Headers

    Imports

    Exports

    Sections

  • Components.1188/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Components.1188/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0453db624ecaef7c4f3da938cd1d0fc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Components.1188/xpcontrol.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a219e121ad0da6d29527e1d98b4b85d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Components.1188/xtrigger.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    0daf68a4b4c0f6f5ea9552365a9c5770


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Components.1188/xvidcodec.dll
    .dll windows:4 windows x86 arch:x86

    bf634c8fcfe369e96e3d54d8dfe57275


    Headers

    Imports

    Exports

    Sections

  • LICENSE.TXT
  • Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.MFC.manifest
  • README.TXT
  • Resource/CHS/background.bmp
  • Resource/CHS/connect.htm
    .html .js polyglot
  • Resource/CHS/images/1ico.gif
    .gif
  • Resource/CHS/images/background.gif
    .gif
  • Resource/CHS/images/bg.gif
    .gif
  • Resource/CHS/images/bgtile.gif
    .gif
  • Resource/CHS/images/connecting.gif
    .gif
  • Resource/CHS/images/errlink.gif
    .gif
  • Resource/CHS/images/error.gif
    .gif
  • Resource/CHS/images/images.rar
    .rar
  • 1ico.gif
    .gif
  • Thumbs.db
  • background.gif
    .gif
  • bg.gif
    .gif
  • bgtile.gif
    .gif
  • connecting.gif
    .gif
  • errlink.gif
    .gif
  • error.gif
    .gif
  • title.gif
    .gif
  • Resource/CHS/images/title.gif
    .gif
  • Resource/CHS/login.htm
    .html .js polyglot
  • Resource/CHS/qserver.htm
    .html .js polyglot
  • Resource/CHS/usbverify.htm
    .html .js polyglot
  • Resource/COMMRES.dll
    .dll windows:5 windows x86 arch:x86

    d0b0ab81bf0e4cd20070f6525db9fd67


    Headers

    Imports

    Sections

  • Resource/background.bmp
  • Resource/default.js
    .js
  • Resource/jxppropres.dll
    .dll windows:5 windows x86 arch:x86

    d0b0ab81bf0e4cd20070f6525db9fd67


    Headers

    Imports

    Sections

  • Resource/xplayerres.dll
    .dll windows:5 windows x86 arch:x86

    d0b0ab81bf0e4cd20070f6525db9fd67


    Headers

    Imports

    Sections

  • components.manifest
  • jxpcomm.dll
    .dll windows:5 windows x86 arch:x86

    25afada90e8910535d299bd99f1435bb


    Headers

    Imports

    Exports

    Sections

  • jxpprop.dll
    .dll windows:5 windows x86 arch:x86

    1721b22111a93d1aea47ced4053dbd05


    Headers

    Imports

    Exports

    Sections

  • kspvcl.dll
    .dll windows:5 windows x86 arch:x86

    a9a48d34c1085f1849b1c237d20ac694


    Headers

    Imports

    Exports

    Sections

  • ksres.dll
    .dll windows:5 windows x86 arch:x86

    aa64158913f7d6b2f89d7025b9716b2e


    Headers

    Imports

    Exports

    Sections

  • ksvolume.dll
    .dll windows:5 windows x86 arch:x86

    aef58b4226d52f4aaca65064a8a69988


    Headers

    Imports

    Exports

    Sections

  • kswctrl.dll
    .dll windows:5 windows x86 arch:x86

    25230b0ab210c0b9b70020e1bdeefb86


    Headers

    Imports

    Exports

    Sections

  • kswguixp.dll
    .dll windows:5 windows x86 arch:x86

    28963f7c01c22612b0c1f5fb3ef7b793


    Headers

    Imports

    Exports

    Sections

  • kswmagic.dll
    .dll windows:5 windows x86 arch:x86

    85f1dd8e609c242023a067e2c2ca824b


    Headers

    Imports

    Exports

    Sections

  • kswmonitor.dll
    .dll windows:5 windows x86 arch:x86

    7d51acc5b3c705f040ef7d22fdecec65


    Headers

    Imports

    Exports

    Sections

  • kswskin.dll
    .dll windows:5 windows x86 arch:x86

    66b7af6fe0a9b45ddb505baadb4dc05b


    Headers

    Imports

    Exports

    Sections

  • localservice.vbs
    .vbs
  • mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    2509f6150913beedb43490ea9b52b2e6


    Code Sign

    Headers

    Imports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0453db624ecaef7c4f3da938cd1d0fc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • temp/msxml6_x86.msi
    .msi
  • uninst.exe.nsis
  • xBrowser.exe
    .exe windows:5 windows x86 arch:x86

    fee33b7d33b51f80f9d6adf386c70b30


    Code Sign

    Headers

    Imports

    Sections

  • xFile.exe
    .exe windows:5 windows x86 arch:x86

    ad981a7df844644d7646f72bca88b7c2


    Code Sign

    Headers

    Imports

    Sections

  • xPlayer.exe
    .exe windows:5 windows x86 arch:x86

    808347aad5a55e60bcf8a1dc47df208e


    Code Sign

    Headers

    Imports

    Sections

  • xService.exe
    .exe windows:5 windows x86 arch:x86

    966b2dafa2d739c6b810e37fcd9308dd


    Code Sign

    Headers

    Imports

    Sections

  • xTransfer.exe
    .exe windows:5 windows x86 arch:x86

    b742110337a9e58b7ac12da71946e28e


    Code Sign

    Headers

    Imports

    Sections

  • xUpdate.exe
    .exe windows:5 windows x86 arch:x86

    6a608a6ecca77948a093f8ffb721f19b


    Code Sign

    Headers

    Imports

    Sections

  • 安装须知.txt