General

  • Target

    01700cc607ae8ac7a780a2fbf91b5241_JaffaCakes118

  • Size

    3.5MB

  • MD5

    01700cc607ae8ac7a780a2fbf91b5241

  • SHA1

    3658f2400016001c45f65ea877b8ec2594578bc6

  • SHA256

    e07fe9c9fe8f6064a2fb12c0f914974cc262b905985ce8cb1a00fdc0a6745464

  • SHA512

    d58f27c46b5573109c13f92a726f5fcfb50849d1e22c745dc587ece8afe9fd859eed71674aad23f299974e4ba019e0657964eb5a43ef205b940e5b4b5358c0d6

  • SSDEEP

    98304:ABgNoUWi71EYXvN/06ReKsbpgvLUaZT2vbx9EV3FzXC:K0oAhh/xPReKsbYLh92vbx9WFzy

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 01700cc607ae8ac7a780a2fbf91b5241_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/MakeDll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/game.ico
  • $SYSDIR/taobao.ico
  • $TEMP/coopen_setup_100030.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PartnerDlg.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/install.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_10_/$_10_/HttpDownloader.exe
    .exe windows:4 windows x86 arch:x86

    4095847f15924fd0fef7c9ebf1826f51


    Code Sign

    Headers

    Imports

    Sections

  • $_10_/$_10_/uninst.exe.nsis
  • $_10_/CCPMachineInfo.dll
    .dll windows:4 windows x86 arch:x86

    22abd1238fcf6f0b3b1549f2db91446e


    Headers

    Imports

    Exports

    Sections

  • $_10_/CoopenActiveControl112.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6aa21ccdbbbb0d1fd90240b162f05b98


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_10_/CoopenAir.exe
    .exe windows:4 windows x86 arch:x86

    ecf221d766b79cb6c95a4674339fc461


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_10_/CoopenMainManager.dll
    .dll windows:4 windows x86 arch:x86

    ff39bc0fde164866e47b81eb1be99471


    Headers

    Imports

    Exports

    Sections

  • $_10_/Resource/Plugins/CoopenLottery.png
    .png
  • $_10_/Resource/Plugins/CoopenNotepad.png
    .png
  • $_10_/Resource/Plugins/CoopenSearchTool.png
    .png
  • $_10_/Resource/Plugins/CoopenWeather.png
    .png
  • $_10_/Resource/Plugins/border.png
    .png
  • $_10_/Resource/Plugins/hover.png
    .png
  • $_10_/Resource/Plugins/running.png
    .png
  • $_10_/Resource/Plugins/tip.png
    .png
  • $_10_/Resource/SkinFormal/Background.png
    .png
  • $_10_/Resource/SkinFormal/Button_Channel.png
    .png
  • $_10_/Resource/SkinFormal/Button_Close.png
    .png
  • $_10_/Resource/SkinFormal/Button_Commit.png
    .png
  • $_10_/Resource/SkinFormal/Button_Next.png
    .png
  • $_10_/Resource/SkinFormal/Button_Pause.png
    .png
  • $_10_/Resource/SkinFormal/Button_Play.png
    .png
  • $_10_/Resource/SkinFormal/Button_Prev.png
    .png
  • $_10_/Resource/SkinFormal/Button_Widget.png
    .png
  • $_10_/Resource/SkinFormal/CheckC.png
    .png
  • $_10_/Resource/SkinFormal/CheckU.png
    .png
  • $_10_/Resource/SkinFormal/Indicator1.png
    .png
  • $_10_/Resource/SkinFormal/Indicator2.png
    .png
  • $_10_/Resource/SkinFormal/MainIcon.png
    .png
  • $_10_/Resource/SkinFormal/Message.png
    .png
  • $_10_/Resource/SkinFormal/Notify.png
    .png
  • $_10_/Resource/SkinFormal/Progress.png
    .png
  • $_10_/Resource/SkinFormal/Push_Cancel.png
    .png
  • $_10_/Resource/SkinFormal/Push_Config.png
    .png
  • $_10_/Resource/SkinFormal/Push_Confirm.png
    .png
  • $_10_/Resource/SkinFormal/Push_Folder.png
    .png
  • $_10_/Resource/SkinFormal/RadioC.png
    .png
  • $_10_/Resource/SkinFormal/RadioU.png
    .png
  • $_10_/Resource/SkinFormal/SkinClient.ini
  • $_10_/Resource/SkinFormal/SkinClose.ini
  • $_10_/Resource/SkinFormal/Synopsis1.ini
  • $_10_/Resource/SkinFormal/Synopsis1.png
    .png
  • $_10_/Resource/SkinFormal/Synopsis2.png
    .png
  • $_10_/Resource/SkinFormal/close.png
    .png
  • $_10_/Resource/SkinFormal/downarrow.png
    .png
  • $_10_/Resource/SkinFormal/hover.png
    .png
  • $_10_/Resource/SkinFormal/leftarrow.png
    .png
  • $_10_/Resource/SkinFormal/rightarrow.png
    .png
  • $_10_/Resource/SkinFormal/setting.png
    .png
  • $_10_/Resource/SkinFormal/uparrow.png
    .png
  • $_10_/Templete/CoopenPhoto.jpg
    .jpg
  • $_10_/Templete/DefaultCoopenWallpaper.jpg
    .jpg
  • $_10_/Templete/ModeB.tpl
  • $_10_/Templete/ModeB_logo.jpg
    .jpg
  • $_10_/Templete/ModeC.tpl
  • $_10_/conf/ChannelListReal.txt
  • $_10_/conf/PluginConfig.ini
  • $_10_/image/Photo/local Photo/B_0.jpg
    .jpg
  • $_10_/image/Photo/local Photo/B_1.jpg
    .jpg
  • $_10_/image/Wallpaper/coopen wallpaper/DefaultCoopenWallpaper.jpg
    .jpg
  • $_10_/image/Wallpaper/local wallpaper/DefaultCoopenWallpaper.jpg
    .jpg
  • $_10_/licence.txt
  • Coopen.exe
    .exe windows:4 windows x86 arch:x86

    37bdd694e262b9b644cfec8bf5405995


    Code Sign

    Headers

    Imports

    Sections

  • $_54_/$_52_
    .exe windows:4 windows x86 arch:x86

    bb85e70bb9ca123a192fb362d332c9e0


    Code Sign

    Headers

    Imports

    Sections

  • $_54_/Engine.dll
    .dll windows:5 windows x86 arch:x86

    6ba23c72182546e3977f6cae83df181c


    Headers

    Imports

    Sections

  • $_55_/$_53_
    .dll windows:5 windows x86 arch:x86

    37fb23d4d1436dd78c149209ac319e81


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • oem.ini
  • ֮.exe
    .exe windows:4 windows x86 arch:x86

    529e31f77e52cbf0a3f800a64416df7b


    Code Sign

    Headers

    Imports

    Sections

  • ֮.ini