Overview

overview

7

Static

static

3

f65a83e2ac...18.exe

windows7-x64

7

f65a83e2ac...18.exe

windows10-2004-x64

7

$FAVORITES...��.url

windows7-x64

1

$FAVORITES...��.url

windows10-2004-x64

1

$FAVORITES...��.url

windows7-x64

1

$FAVORITES...��.url

windows10-2004-x64

1

$FAVORITES...��.url

windows7-x64

1

$FAVORITES...��.url

windows10-2004-x64

1

$FAVORITES...��.url

windows7-x64

1

$FAVORITES...��.url

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...tp.dll

windows7-x64

3

$PLUGINSDI...tp.dll

windows10-2004-x64

3

$SMPROGRAM...��.url

windows7-x64

1

$SMPROGRAM...��.url

windows10-2004-x64

1

$SMPROGRAM...��.url

windows7-x64

1

$SMPROGRAM...��.url

windows10-2004-x64

1

$SMPROGRAM...��.url

windows7-x64

1

$SMPROGRAM...��.url

windows10-2004-x64

1

$SMPROGRAM...��.url

windows7-x64

1

$SMPROGRAM...��.url

windows10-2004-x64

1

$STARTMENU...��.url

windows7-x64

1

$STARTMENU...��.url

windows10-2004-x64

1

$STARTMENU...��.url

windows7-x64

1

$STARTMENU...��.url

windows10-2004-x64

1

$STARTMENU...��.url

windows7-x64

1

$STARTMENU...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f65a83e2ac84b0133e37a31d543ed511_JaffaCakes118

  • Size

    2.1MB

  • MD5

    f65a83e2ac84b0133e37a31d543ed511

  • SHA1

    d73879f7662b7cab69380815fbc9b93d2a02614e

  • SHA256

    2b675c2fb134e314f64b29dc8f205f79f04e7367e3870d7288e89a4cf240cf2b

  • SHA512

    c314d7cfc8d1e2db63a38fac4be7a59f77760f4a7e7a1ca3aaa5eccf6f5dca604c41017303065680bc57c6ed89d9c407124e57761e60b966f4293adfc6bedf05

  • SSDEEP

    49152:YbEcRk6fLC5nbCcOCcW4Gvla+gsnwjxSjO+Y/7wZx8o7SBgHMtybd5p:Yhkm2sCH4GfzkSjO+6WSJtgp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs
    installer

Files

  • f65a83e2ac84b0133e37a31d543ed511_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $FAVORITES/,Ӱ.url
  • $FAVORITES/.url
  • $FAVORITES/Ƶ͵_.url
  • $FAVORITES/Ա.url
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/rfshdktp.dll
    .dll windows:4 windows x86 arch:x86

    042f3c184e7c0923b6325ab1dc09aed7


    Headers

    Imports

    Exports

    Sections

  • $SMPROGRAMS/,Ӱ.url
  • $SMPROGRAMS/.url
  • $SMPROGRAMS/Ƶ͵_.url
  • $SMPROGRAMS/Ա.url
  • $STARTMENU/,Ӱ.url
  • $STARTMENU/.url
  • $STARTMENU/Ƶ͵_.url
  • $STARTMENU/Ա.url
  • $SYSDIR/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/s.ico
  • $SYSDIR/taobao.ico
  • AddIn/VisLrc.dll
    .dll windows:4 windows x86 arch:x86

    405f85e6c10ba505edbac8ea83c4ca8c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/ColorFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    d6358db2b2f2325d29c23c3433a0656f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/RealMediaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    092c362fafa1e9277558c0e5612fdfba


    Headers

    Imports

    Exports

    Sections

  • Codecs/asfsplliter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    61540ae4d5f1fe29babe6b430f77a241


    Headers

    Imports

    Exports

    Sections

  • Codecs/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • Codecs/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • Codecs/f4v.swf
  • Codecs/raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • Lang/en_US.dll
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Sections

  • Lang/zh_TW.dll
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Sections

  • NetAgent.dll
    .dll windows:4 windows x86 arch:x86

    f618d4cb4d41a461355f2eab6ae077ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Playlist/Channel.xml
  • Playlist/Keywords.xml
  • Playlist/Mediacenter.xml
  • Playlist/Playlist.xml
  • Playlist/QvodSearch.xml
    .xml
  • Playlist/Text.xml
  • Qvod.cfg
  • QvodBand.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0e32a3b828b41920c248142fcbc590d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodCfg.ini
  • QvodExtend.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5fa4c601c60be9d7e5a41cb73948ac64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodInsert.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    512da446183fb702675cbe4761220c96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodPlayer.exe
    .exe windows:4 windows x86 arch:x86

    355dee5b1674aca2dd7968a22943adc3


    Code Sign

    Headers

    Imports

    Sections

  • QvodPlayer.xml
    .xml
  • QvodTerminal.exe
    .exe windows:4 windows x86 arch:x86

    9232d0b3056ac0dcec0880d50328a24b


    Code Sign

    Headers

    Imports

    Sections

  • QvodUninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $TEMP/QvodInit.exe
    .exe windows:4 windows x86 arch:x86

    47ca16f9ccfa1108a6da24b0442ee949


    Code Sign

    Headers

    Imports

    Sections

  • ShareModule.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4d31033905b7f9799eebc95dce22db30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Skin/Default.xml
  • Skin/Default/back.bmp
  • Skin/Default/backleft.bmp
  • Skin/Default/backmid.bmp
  • Skin/Default/backright.bmp
  • Skin/Default/bgline.bmp
  • Skin/Default/bleft1.bmp
  • Skin/Default/bottom.bmp
  • Skin/Default/bottomleft.bmp
  • Skin/Default/bottomright.bmp
  • Skin/Default/bright1.bmp
  • Skin/Default/caption.bmp
  • Skin/Default/close.bmp
  • Skin/Default/full.bmp
  • Skin/Default/icon.bmp
  • Skin/Default/info.bmp
  • Skin/Default/infofull.bmp
  • Skin/Default/left.bmp
  • Skin/Default/left1.bmp
  • Skin/Default/listbutton.bmp
  • Skin/Default/listbutton2.bmp
  • Skin/Default/listsplit.bmp
  • Skin/Default/lsearchb1.bmp
  • Skin/Default/lsearchb2.bmp
  • Skin/Default/lsearchbg.bmp
  • Skin/Default/lsearchbg1.bmp
  • Skin/Default/max.bmp
  • Skin/Default/media_del.bmp
  • Skin/Default/media_files.bmp
  • Skin/Default/media_files_2.bmp
  • Skin/Default/media_fill.bmp
  • Skin/Default/media_info.bmp
  • Skin/Default/media_search.bmp
  • Skin/Default/media_sham.bmp
  • Skin/Default/media_sham_2.bmp
  • Skin/Default/mediaeditdel.bmp
  • Skin/Default/mediare.bmp
  • Skin/Default/mediatolist.bmp
  • Skin/Default/mediatree.bmp
  • Skin/Default/menu.bmp
  • Skin/Default/min.bmp
  • Skin/Default/mtk.bmp
  • Skin/Default/mute.bmp
  • Skin/Default/mute2.bmp
  • Skin/Default/next.bmp
  • Skin/Default/nowplay.bmp
  • Skin/Default/open.bmp
  • Skin/Default/pause.bmp
  • Skin/Default/play.bmp
  • Skin/Default/playlist_toolbar.bmp
  • Skin/Default/pre.bmp
  • Skin/Default/processp.bmp
  • Skin/Default/progress.bmp
  • Skin/Default/progress_point_a.bmp
  • Skin/Default/progress_point_b.bmp
  • Skin/Default/progress_thumb.bmp
  • Skin/Default/reold.bmp
  • Skin/Default/right.bmp
  • Skin/Default/right1.bmp
  • Skin/Default/scroll_back.bmp
  • Skin/Default/scroll_back_h.bmp
  • Skin/Default/scroll_down.bmp
  • Skin/Default/scroll_left.bmp
  • Skin/Default/scroll_limit.bmp
  • Skin/Default/scroll_limit_h.bmp
  • Skin/Default/scroll_right.bmp
  • Skin/Default/scroll_up.bmp
  • Skin/Default/search_botton.bmp
  • Skin/Default/search_icon.bmp
  • Skin/Default/stop.bmp
  • Skin/Default/tab.bmp
  • Skin/Default/tab1.bmp
  • Skin/Default/tabs_fill.bmp
  • Skin/Default/tabs_left.bmp
  • Skin/Default/tabs_mid.bmp
  • Skin/Default/tabs_right.bmp
  • Skin/Default/tabs_search_fill.bmp
  • Skin/Default/tabs_search_left.bmp
  • Skin/Default/top.bmp
  • Skin/Default/topleft.bmp
  • Skin/Default/topleft1.bmp
  • Skin/Default/topright.bmp
  • Skin/Default/topright1.bmp
  • Skin/Default/volume.bmp
  • Skin/Default/volumeb.bmp
  • Skin/Default/volumep.bmp
  • Skin/Logo.bmp
  • Skin/MiNi/back.bmp
  • Skin/MiNi/info.bmp
  • Skin/MiNi/mute.bmp
  • Skin/MiNi/mute2.bmp
  • Skin/MiNi/next.bmp
  • Skin/MiNi/open.bmp
  • Skin/MiNi/pause.bmp
  • Skin/MiNi/play.bmp
  • Skin/MiNi/pre.bmp
  • Skin/MiNi/processp.bmp
  • Skin/MiNi/progress.bmp
  • Skin/MiNi/progress_thumb.bmp
  • Skin/MiNi/progressd.bmp
  • Skin/MiNi/volume.bmp
  • Skin/MiNi/volumeb.bmp
  • Skin/MiNi/volumep.bmp
  • Skin/Mini.xml
  • Tip/PopMessage.xml
    .xml
  • Tip/QvodTip.exe
    .exe windows:4 windows x86 arch:x86

    3d812c4c97128ca0e08c8dab57ae38e0


    Code Sign

    Headers

    Imports

    Sections

  • Tip/QvodTips.dll
    .dll windows:4 windows x86 arch:x86

    d7778d884b245e49861f228104669703


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Tip/QvodTips_.xml
    .xml
  • Tip/back.bmp
  • Tip/close.bmp
  • Tip/maintext.bmp
  • Tip/view.bmp
  • dll.bat
  • play3.exe
    .exe windows:4 windows x86 arch:x86

    98adc6ccac4b4ccec17ba8f3f011ab9d


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections