General

  • Target

    04396ef86d9b11b19980cf520e455ada_JaffaCakes118

  • Size

    1.4MB

  • MD5

    04396ef86d9b11b19980cf520e455ada

  • SHA1

    b0d3a32f0e466246542f28d8e88db637e59e2b39

  • SHA256

    b4b77f90e3fa560c5e7aacbc79c39ef38bc1cb72c1eddff0ca6ccbf16f94cc5d

  • SHA512

    8e7f26bee83d427393fb41367f1d25cebe2526d618d9985a076804cc500ac19245f8f38ad40cbb6681f4e78319561a1f0f5191ca44933050002d2dd7ea0aeece

  • SSDEEP

    24576:nMSR2AjCJv9fR3ByH8sAFTeTOORyP1RVVIzFb4aJeInq0KOA+8w:MSR2YUv9fblsAFTpVWzpjeInZV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 12 IoCs

Files

  • 04396ef86d9b11b19980cf520e455ada_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Banner.dll
    .dll windows:4 windows x86 arch:x86

    7a3709b093081d5614be1eaa2fe7fe76


    Headers

    Imports

    Exports

    Sections

  • $TEMPLATES/Setup.txt
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    295fc8c35dee88b924b0f6bafc807c6c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • KKjie.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $EXEDIR/KKjie_safe.exe
    .exe windows:4 windows x86 arch:x86

    abce444929305d304b614246e3d25e2e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Banner.dll
    .dll windows:4 windows x86 arch:x86

    7a3709b093081d5614be1eaa2fe7fe76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • KKjie_safe.exe
    .exe windows:4 windows x86 arch:x86

    abce444929305d304b614246e3d25e2e


    Headers

    Imports

    Sections

  • KKjie_safe.hlp
    .dll windows:4 windows x86 arch:x86

    8e97a126738cb62d6e44295bb3e35e7d


    Headers

    Imports

    Exports

    Sections

  • KKjie_safe.lib
  • icons/kkjie_01.png
    .png
  • icons/kkjie_03.png
    .png
  • icons/kkjie_05.png
    .png
  • icons/kkjie_06.png
    .png
  • icons/kkjie_25.png
    .png
  • icons/kkjie_26.png
    .png
  • icons/kkjie_27.png
    .png
  • icons/kkjie_33.png
    .png
  • icons/kkjie_65.png
    .png
  • icons/kkjie_83.png
    .png
  • icons/soft/ico.png
    .png
  • icons/soft/kkjie_66.png
    .png
  • icons/soft/kkjie_67.png
    .png
  • icons/soft/kkjie_68.png
    .png
  • icons/soft/kkjie_69.png
    .png
  • icons/soft/kkjie_70.png
    .png
  • icons/soft/kkjie_71.png
    .png
  • icons/soft/kkjie_72.png
    .png
  • icons/soft/kkjie_73.png
    .png
  • icons/soft/kkjie_74.png
    .png
  • icons/soft/kkjie_75.png
    .png
  • icons/soft/kkjie_76.png
    .png
  • icons/soft/kkjie_77.png
    .png
  • icons/soft/kkjie_78.png
    .png
  • icons/soft/kkjie_79.png
    .png
  • icons/soft/kkjie_80.png
    .png
  • icons/soft/kkjie_81.png
    .png
  • icons/soft/kkjie_82.png
    .png
  • kkjie/Default.png
    .png
  • kkjie/Thumbs.db
  • kkjie/kk.dat
  • kkjie_skins/Default/kk.bmp
  • kkjie_skins/Default/kkjie.kk
    .png
  • kkjie_skins/Default/line.png
    .png
  • languages/Chinese.lang
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • xiezai.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $TEMPLATES/installstat.exe
    .exe windows:4 windows x86 arch:x86

    88303b9e184caf0c30b164c35033709b


    Headers

    Imports

    Sections

  • $TEMPLATES/readme.txt
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Baidu/AddressBar/AddressBar_Tmp/AddressBar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3b5b9821e3ceb6bf48e4ab67e12a6966


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMPLATES/redalert3.txt
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMPLATES/statistics.dll
    .dll windows:4 windows x86 arch:x86

    c7b3cffa04403a1f7a28c3a45798ce21


    Headers

    Imports

    Exports

    Sections