General

  • Target

    0a75d7e73efd1271900a14b32cdea95f_JaffaCakes118

  • Size

    2.8MB

  • MD5

    0a75d7e73efd1271900a14b32cdea95f

  • SHA1

    022f3659133ef84a04b3bfdd171604a3658c322a

  • SHA256

    a32b6223744b7609de3117e3a1ec9bc6070163e0b6500f38a57fd2f2db4a9ad8

  • SHA512

    af6a826f5e9e20a8561b44f9fc5dcb6433f1fdee3249500524c17d064c9907abf8d0ef1474db76e57ba684b8c6a0e6e3c4d5c8ce1c6d1d37fd7d80736f6f2673

  • SSDEEP

    49152:ow1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqF7dLRF8oA5D6qA3vkYsgxoiX:ofwD6b3vkYZmmU0PBZOkehJg7Xy3m

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 0a75d7e73efd1271900a14b32cdea95f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWebJPDesk.dll
    .dll windows:5 windows x86 arch:x86

    5d3df16a8d104fe20f3526a5165e6a05


    Headers

    Imports

    Exports

    Sections

  • Default.png.tmp
    .png
  • Desklets/Calendar/Calendar.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Desklets/Calendar/Calendar.ini
  • Desklets/Calendar/Pic/Collpse.png
    .png
  • Desklets/Calendar/Pic/Day Rect.png
    .png
  • Desklets/Calendar/Pic/Day_Back_Collpse.png
    .png
  • Desklets/Calendar/Pic/Day_Back_Expand.png
    .png
  • Desklets/Calendar/Pic/Expand.png
    .png
  • Desklets/Calendar/Pic/today.png
    .png
  • Desklets/DeskSearch/DeskSearch.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Desklets/DeskSearch/DeskSearch.ini
  • Desklets/DeskSearch/Pic/Google.png
    .png
  • Desklets/DeskSearch/Pic/Sogou.png
    .png
  • Desklets/DeskSearch/Pic/YouDao.png
    .png
  • Desklets/DeskSearch/Pic/baidu.png
    .png
  • Desklets/DeskSearch/Pic/blue.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f1.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f2.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f3.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f4.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f5.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f6.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f7.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f8.png
    .png
  • Desklets/DeskSearch/Pic/blue/bar_f9.png
    .png
  • Desklets/DeskSearch/Pic/btn_arrow_down.png
    .png
  • Desklets/DeskSearch/Pic/btn_color.png
    .png
  • Desklets/DeskSearch/Pic/btn_find.png
    .png
  • Desklets/DeskSearch/Pic/dt_logo.png
    .png
  • Desklets/DeskSearch/Pic/dt_wenzi.png
    .png
  • Desklets/DeskSearch/Pic/glass.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f1.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f2.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f3.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f4.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f5.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f6.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f7.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f8.png
    .png
  • Desklets/DeskSearch/Pic/glass/bar_f9.png
    .png
  • Desklets/DeskSearch/Pic/pink.png
    .png
  • Desklets/DeskSearch/Pic/pink/bar_f1.png
    .png
  • Desklets/DeskSearch/Pic/purple.png
    .png
  • Desklets/Weather/Weather.ini
  • PicLib/App/BitComet.png
    .png
  • PicLib/App/Fetion.png
    .png
  • PicLib/App/Maxthon.png
    .png
  • PicLib/App/Maxthon2.png
    .png
  • PicLib/App/Nero.png
    .png
  • PicLib/App/Opera.png
    .png
  • PicLib/App/TheWorld.png
    .png
  • PicLib/App/Thunder.png
    .png
  • PicLib/App/firefox.png
    .png
  • PicLib/FileTypes/PDF.png
    .png
  • PicLib/FileTypes/doc.png
    .png
  • PicLib/FileTypes/eml.png
    .png
  • PicLib/FileTypes/ppt.png
    .png
  • PicLib/FileTypes/psd.png
    .png
  • PicLib/FileTypes/rar.png
    .png
  • PicLib/FileTypes/vsd.png
    .png
  • PicLib/FileTypes/xls.png
    .png
  • PicLib/FileTypes/zip.png
    .png
  • PicLib/System/Almanac.png
    .png
  • PicLib/System/DesktopBG.jpg
    .jpg
  • PicLib/System/DesktopBg1.jpg
    .jpg
  • PicLib/System/IE.png
    .png
  • PicLib/System/MSN.png
    .png
  • PicLib/System/MyComputer.png
    .png
  • PicLib/System/MyDocument.png
    .png
  • PicLib/System/NetWork.png
    .png
  • PicLib/System/QQ.png
    .png
  • PicLib/System/Recycle_Full.png
    .png
  • PicLib/System/Recycle_empty.png
    .png
  • PicLib/System/SearchPage.png
    .png
  • PicLib/System/WMP.png
    .png
  • PicLib/System/Weather.png
    .png
  • PicLib/System/folder.png
    .png
  • PicLib/System/taobao.png
    .png
  • jpdesk.exe.tmp
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • poof.png.tmp
    .png
  • updateinfo.txt.tmp