General

  • Target

    0d791ec2d99591701e6233dda55b3021_JaffaCakes118

  • Size

    2.3MB

  • MD5

    0d791ec2d99591701e6233dda55b3021

  • SHA1

    e67491548b8582c9a31c6dcbe416b5fb8e603a5e

  • SHA256

    72df5db27eac293cb7e28cef6e66fae672a3677ea44cbf7b845ea35c1a4f117e

  • SHA512

    243ba6f2fc4f36f874c8f2ccffaac08bb325846b6b581dfa6e007429c5fc33c33ef275abe15bc76a3e3d675a836eb7859b70189735ae5891f397e3be4419b384

  • SSDEEP

    49152:8sYPlH520uRJP9qMQKXovVCf7D+R+iaTULgTbR53aOcp5wYaO:8sgh5mRJV7XNzD8NaoYbqOE5wY

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 29 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0d791ec2d99591701e6233dda55b3021_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $APPDATA/duowan/yy/$0_/ReleaseNotes.txt
  • $FAVORITES/Ϸ.url
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/finish_page_hr.bmp
  • $PLUGINSDIR/homepage_icon.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • AudioCodec.dll
    .dll windows:4 windows x86 arch:x86

    a4231295b1f14f2ba00d55accaf3c119


    Headers

    Imports

    Exports

    Sections

  • AudioEngine.dll
    .dll windows:4 windows x86 arch:x86

    39f05ce3164dcc69c5bb69579ba17632


    Headers

    Imports

    Exports

    Sections

  • BugReport.exe
    .exe windows:4 windows x86 arch:x86

    bb5bd692541a2ad6b1bc50aa8cd49f06


    Headers

    Imports

    Sections

  • HookAudio.dll
    .dll windows:4 windows x86 arch:x86

    b9c79e441df4408a00d00fe93f84f9ba


    Headers

    Imports

    Exports

    Sections

  • Http.dll
    .dll windows:4 windows x86 arch:x86

    cdab464d64502e2915b0d5e721c4f642


    Headers

    Imports

    Exports

    Sections

  • IM.dll
    .dll windows:4 windows x86 arch:x86

    4a0609a66e1282613018a05686708db5


    Headers

    Imports

    Exports

    Sections

  • LCtrl.dll
    .dll windows:4 windows x86 arch:x86

    a431b9f9d846e7001e027e2b6c6179cd


    Headers

    Imports

    Exports

    Sections

  • LVDownloader.dll
    .dll windows:4 windows x86 arch:x86

    9d1c32faca75a3c5e88a817185d3918f


    Headers

    Imports

    Exports

    Sections

  • LayoutUI.dll
    .dll windows:4 windows x86 arch:x86

    1c7e8a35d2519ef63de17f39638435fb


    Headers

    Imports

    Exports

    Sections

  • LayoutWrapper.dll
    .dll windows:4 windows x86 arch:x86

    52cab92266399b160a884c52a30016cd


    Headers

    Imports

    Exports

    Sections

  • MFC71u.dll
    .dll windows:4 windows x86 arch:x86

    b3fbf4599c17e9bc7ccae6518bf0f868


    Headers

    Imports

    Sections

  • MessageHistroy.dll
    .dll windows:4 windows x86 arch:x86

    4ad053733b6978fadfa697d070ebd19d


    Headers

    Imports

    Exports

    Sections

  • Mp3Enc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PUBFUNC.dll
    .dll windows:4 windows x86 arch:x86

    6e14aa5cb5515c4c15c8be33f50a3571


    Headers

    Imports

    Exports

    Sections

  • PluginSDK.dll
    .dll windows:4 windows x86 arch:x86

    9965f05ba69bb2ab6b188562705e2696


    Headers

    Imports

    Exports

    Sections

  • ReleaseNotes.txt
  • Smile.dll
    .dll windows:4 windows x86 arch:x86

    d3ce250fc58703bbeeae82874b0ea06d


    Headers

    Imports

    Exports

    Sections

  • Start.exe
    .exe windows:4 windows x86 arch:x86

    1d90bccc4ea66f458bca1b996f7a0722


    Headers

    Imports

    Exports

    Sections

  • audio.dll
    .dll windows:4 windows x86 arch:x86

    1c860e59edf4fec0644c0d29a6470cc4


    Headers

    Imports

    Exports

    Sections

  • crashreport.dll
    .dll windows:4 windows x86 arch:x86

    1750f05d7f4c1345bafb02319401218c


    Headers

    Imports

    Exports

    Sections

  • duospeak.exe
    .exe windows:4 windows x86 arch:x86

    175da157c1385445ad4b22751c195d13


    Headers

    Imports

    Exports

    Sections

  • installstat.exe
    .exe windows:4 windows x86 arch:x86

    73b7769a4e8cfa48a26bd9fb7c5a6fc5


    Headers

    Imports

    Sections

  • keyhook.dll
    .dll windows:4 windows x86 arch:x86

    cef235e99dc5020d8e4fa933c1ab68a1


    Headers

    Imports

    Exports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • neonet.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections