Overview

overview

7

Static

static

3

098ac0abec...18.exe

windows7-x64

7

098ac0abec...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/exdll.dll

windows7-x64

3

$PLUGINSDIR/exdll.dll

windows10-2004-x64

3

AutoUpdate.dll

windows7-x64

3

AutoUpdate.dll

windows10-2004-x64

3

CaiHong.dll

windows7-x64

3

CaiHong.dll

windows10-2004-x64

3

CaiHong.exe

windows7-x64

7

CaiHong.exe

windows10-2004-x64

7

Reporter.dll

windows7-x64

3

Reporter.dll

windows10-2004-x64

3

msimg32.dll

windows7-x64

3

msimg32.dll

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/exdll.dll

windows7-x64

3

$PLUGINSDIR/exdll.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    098ac0abecc4ef0b1523053dda3cd4dd_JaffaCakes118

  • Size

    1.6MB

  • MD5

    098ac0abecc4ef0b1523053dda3cd4dd

  • SHA1

    d85fbf81cbe371f80a50966cf509b732e7d0fa36

  • SHA256

    74be6c40d1f22f291dd504e97570c7c678ce9e46e32dfd94c94126de75ae21cd

  • SHA512

    e2aa57a1c483ac726527acc35ae82727839600d1c60be63c7cc01337427e2e90652020126fb23f834256416113ad5fdf4dba48df75f62163c0473458851a20ce

  • SSDEEP

    24576:2c5YG52ob3weTAASN0mX/odwVbYM63xSe1QvyVkEwMD8FumJrVK25YadBP4l6:2UjTwe8Ag0mgdw6Se1QvyVvwr9yaXP4M

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 098ac0abecc4ef0b1523053dda3cd4dd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    36276e7c12820586c6f4cfea7e3f74d2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallQQ.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/exdll.dll
    .dll windows:4 windows x86 arch:x86

    0fbd870a9df4bb2f47d2ec7da8a6cabf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/image.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AutoUpdate.dll
    .dll windows:4 windows x86 arch:x86

    ed7d48ed2a544f202d37c48f66dec8cf


    Headers

    Imports

    Exports

    Sections

  • CaiHong.dat
  • CaiHong.dll
    .dll windows:4 windows x86 arch:x86

    a5f1341784da68500d6b5a1051234981


    Headers

    Imports

    Exports

    Sections

  • CaiHong.exe
    .exe windows:4 windows x86 arch:x86

    861e6d8041918670611caf53fadec996


    Headers

    Imports

    Sections

  • Config.ini
  • Reporter.dll
    .dll windows:4 windows x86 arch:x86

    46cc02335cf5398097798c0e61eb2c99


    Headers

    Imports

    Exports

    Sections

  • Res/FaceImg/1.gif
  • Res/FaceImg/10.gif
  • Res/FaceImg/11.gif
  • Res/FaceImg/12.gif
  • Res/FaceImg/13.gif
  • Res/FaceImg/14.gif
  • Res/FaceImg/15.gif
  • Res/FaceImg/2.gif
  • Res/FaceImg/3.gif
  • Res/FaceImg/4.gif
    .gif
  • Res/FaceImg/5.gif
  • Res/FaceImg/6.GIF
  • Res/FaceImg/7.gif
  • Res/FaceImg/8.gif
  • Res/FaceImg/9.gif
  • Update.ini
  • Version.ini
  • mdic.dat
  • msimg32.dll
    .dll windows:4 windows x86 arch:x86

    75c7669e7fca8c431d69833f5cef87ed


    Headers

    Imports

    Exports

    Sections

  • prefix.txt
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    36276e7c12820586c6f4cfea7e3f74d2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DiaoCha.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/exdll.dll
    .dll windows:4 windows x86 arch:x86

    0fbd870a9df4bb2f47d2ec7da8a6cabf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • version.txt