General

  • Target

    027967cd73479ebc0037843d7dba77de_JaffaCakes118

  • Size

    56.4MB

  • MD5

    027967cd73479ebc0037843d7dba77de

  • SHA1

    49d3a667d20199e971643e1367d650d3548d0823

  • SHA256

    5be17f67ac39a99edfe33a216cd8b0e04f2a1e329175f195c5c5a03297cf9cae

  • SHA512

    c5ac217a651002df45c7524eb8ce8781090aabafc28d6c6f31016554e62b2e9097c07a943e39c6ec8979c1972b0d9e5daeb64379bc9a0448405266c0432152db

  • SSDEEP

    1572864:Ttil/D9VVpEemnX9KBiZNqKZ58BYGnfTYomOw1g:TtE/DfVpFmX9mifLZ5dbomOwW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 027967cd73479ebc0037843d7dba77de_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $LOCALAPPDATA/2345Explorer/User Data/Default/ExternalExtensions/GameBox.crx
    .zip
  • css/gamebox.css
  • images/flag.png
    .png
  • images/icon.png
    .png
  • images/icon_16.png
    .png
  • images/icon_48.png
    .png
  • images/logo.png
    .png
  • images/user.png
    .png
  • js/clickcount.js
    .js
  • js/data.json
  • js/lib/jquery-2.1.4.min.js
    .js
  • js/lib/smile.js
    .js
  • js/model.js
    .js
  • manifest.json
  • pic/baizhantianxia.jpg
    .jpg
  • pic/banner.jpg
    .jpg
  • pic/chuanqibaye.jpg
    .jpg
  • pic/datianshizhijian.jpg
    .jpg
  • pic/hundunzhanyu.jpg
    .jpg
  • popup.html
    .html
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Favicons
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/A0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/B0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/C.ini
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/C1.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/D0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/E0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/F0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/G0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/H1.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/J0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/K0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/L0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/N0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/O0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/P0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Onlinedata/Q0.data
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/0EE10DC0FD05BED87C9EF686F5E6BE92.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/1751D2661AE639B4F73206E4F89D00F5.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/1D876C8016E444F128E51846E997630B.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/784820CCC528CC3A3CF2DF3B677F8761.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/84675A6817FC8715E33BC1C631154B5D.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/90433BFDBA8D3DEC74088DF219B5FCF3.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/9867E1A95934F6EB36BAFEA53716AA8D.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/A23E76182652117769CBF29F57E0B586.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/D9E52DE83E669630BF15DBA5427720EF.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/F3CEDB071529EE68B89FD52ECB5DB549.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/F4DDED3DA48B6C255E1C0A7170892493.jpg
    .jpg
  • $LOCALAPPDATA/2345Explorer/User Data/Default/Thumbnails/v1/thumbnailslist
  • $PLUGINSDIR/FileInfo.dll
    .dll windows:5 windows x86 arch:x86

    174721c97ad29cab0215db65417dfb8f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/RCWidgetPlugin.dll
    .dll windows:5 windows x86 arch:x86

    9953a323cf767428705c50183382ee44


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/upgrade_data.dll
    .dll windows:5 windows x86 arch:x86

    fbf6c5e78d6521de69cbcf1ffb620495


    Headers

    Imports

    Exports

    Sections

  • $TEMP/clear_cache.exe
  • 2345Explorer.exe
  • 2345王牌浏览器免责声明.txt
  • 6.3.0.9753.manifest
  • Extensions/defalut_extensions.json
  • Locales/zh-CN.pak
  • NativeFlash/NPSWF32.dll
  • NativeFlash/plugin.vch
  • PepperFlash/manifest.json
  • PepperFlash/pepflashplayer.dll
  • Plugins/np-mswmp.dll
  • Protect/2345InstallerWebProtect.dll
  • Protect/PopupTool.exe
  • Protect/Protect_2345Explorer.exe
  • Protect/ServiceManager.exe
  • Protect/UpdateMain.dll
  • Protect/coral_extract.dll
  • Protect/crash_service_dll.dll
  • Uninstall.exe
  • User Data/Default/Favicons
  • User Data/Default/Thumbnails/v1/0EE10DC0FD05BED87C9EF686F5E6BE92.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/1751D2661AE639B4F73206E4F89D00F5.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/1D876C8016E444F128E51846E997630B.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/784820CCC528CC3A3CF2DF3B677F8761.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/84675A6817FC8715E33BC1C631154B5D.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/90433BFDBA8D3DEC74088DF219B5FCF3.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/9867E1A95934F6EB36BAFEA53716AA8D.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/A23E76182652117769CBF29F57E0B586.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/D9E52DE83E669630BF15DBA5427720EF.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/F3CEDB071529EE68B89FD52ECB5DB549.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/F4DDED3DA48B6C255E1C0A7170892493.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/thumbnailslist
  • breakpad.dll
  • capture.dll
  • chrome.dll
  • chrome_100_percent.pak
    .js
  • chrome_child.dll
  • chrome_elf.dll
  • content_resources.pak
    .js
  • coral_extract.dll
  • d3dcompiler_46.dll
  • delegate_execute.exe
  • ffmpegsumo.dll
  • gdiplus_encapsulation.dll
  • gesture_dll.dll
  • icudtl.dat
  • libegl.dll
  • libexif.dll
  • libglesv2.dll
  • libpeerconnection.dll
  • metro_driver.dll
  • multimedia_dll.dll
  • pdf.dll
  • resources.pak
    .js
  • trident_core.dll
  • upgrade_notify.exe
  • welcome.ini
  • widevinecdmadapter.dll
  • wow_helper.exe
  • xinput1_3.dll