General

  • Target

    15645365964bc9b82f6f85bfcdd66dfd_JaffaCakes118

  • Size

    6.7MB

  • MD5

    15645365964bc9b82f6f85bfcdd66dfd

  • SHA1

    fc3f7ffed0be6de82f8a66d84c4c89544ab91b87

  • SHA256

    f972e0585513e0f18ea89b5eb3208892974f0c0f6c359449c5d491d63e3b6bbe

  • SHA512

    f267b938d73f5edb2b049a65bf5cf1cdfb409660d36842e3c027d20d90189109cdeadbef709c49d4d2fa3e9a9650f5c39992ad10694e4eb463f507f7657aee75

  • SSDEEP

    98304:TpAri9ou0nK1g4OCGPctgZN9EmRVQgFwrPKsdRrgYXxPmPKJSOc8/xHyPY:TpV90nK1gjPDZkmR/UisbxPm0c8lyw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • 15645365964bc9b82f6f85bfcdd66dfd_JaffaCakes118
    .rar
  • winiso/Key/read.txt
  • winiso/Key/user.ini
  • winiso/winiso.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:5 windows x86 arch:x86

    022a6b06b812476030e41063d84f35da


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • Resources/aff.dat
  • Resources/langs/ar.qm
  • Resources/langs/de.qm
  • Resources/langs/en.qm
  • Resources/langs/es.qm
  • Resources/langs/es_MX.qm
  • Resources/langs/fr.qm
  • Resources/langs/hu.qm
  • Resources/langs/id.qm
  • Resources/langs/it.qm
  • Resources/langs/ja.qm
  • Resources/langs/ko.qm
  • Resources/langs/pl.qm
  • Resources/langs/pt_BR.qm
  • Resources/langs/ru.qm
  • Resources/langs/tr.qm
  • Resources/langs/zh_CN.qm
  • Resources/langs/zh_TW.qm
  • Resources/meta.dat
  • Resources/style.bin
  • bin/QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    102f0d7041cb30e5a8ae478a6b10e69b


    Headers

    Imports

    Exports

    Sections

  • bin/QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    17d4761735d090dbc5b2a031107d4ecb


    Headers

    Imports

    Exports

    Sections

  • bin/QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    3c3e45e22da444d11d9c1de6e965bd29


    Headers

    Imports

    Exports

    Sections

  • bin/baseio.dll
    .dll windows:5 windows x86 arch:x86

    3f4edf2f4ec975c2d2447cabcf810d45


    Headers

    Imports

    Exports

    Sections

  • bin/codecs/qcncodecs4.dll
    .dll windows:5 windows x86 arch:x86

    dcf5ed1496ecf5c98ccfe2e07b56f610


    Headers

    Imports

    Exports

    Sections

  • bin/codecs/qjpcodecs4.dll
    .dll windows:5 windows x86 arch:x86

    30f1ed7737bff2301753cb287448a5e8


    Headers

    Imports

    Exports

    Sections

  • bin/codecs/qkrcodecs4.dll
    .dll .ps1 windows:5 windows x86 arch:x86 polyglot

    0b7c004e28c5207481371b32b5b36999


    Headers

    Imports

    Exports

    Sections

  • bin/codecs/qtwcodecs4.dll
    .dll windows:5 windows x86 arch:x86

    ce6a67fa3ba293b459092f0443b305fc


    Headers

    Imports

    Exports

    Sections

  • bin/core/core.dll
    .dll windows:5 windows x86 arch:x86

    b1965e7a1b64bc4a13729585dc653da6


    Headers

    Imports

    Exports

    Sections

  • bin/filesystem/cdfs.dll
    .dll windows:5 windows x86 arch:x86

    264c8a0d6c8de7ed0ac7e79f22616253


    Headers

    Imports

    Exports

    Sections

  • bin/filesystem/hfsplus.dll
    .dll windows:5 windows x86 arch:x86

    670a08b26183d3f8f8fd21f3c1b0c9de


    Headers

    Imports

    Exports

    Sections

  • bin/filesystem/udf.dll
    .dll windows:5 windows x86 arch:x86

    04151c7223f53fcbc04d1ff8fd403ea2


    Headers

    Imports

    Exports

    Sections

  • bin/format/ccd.dll
    .dll windows:5 windows x86 arch:x86

    fd3edd3f5dce98a589e4e92d64df3b8f


    Headers

    Imports

    Exports

    Sections

  • bin/format/cue.dll
    .dll windows:5 windows x86 arch:x86

    995ee0c0f686cf36778281f655656370


    Headers

    Imports

    Exports

    Sections

  • bin/format/drive.dll
    .dll windows:5 windows x86 arch:x86

    3991efe6d434ec9c109d67f1629e56c7


    Headers

    Imports

    Exports

    Sections

  • bin/format/iso.dll
    .dll windows:5 windows x86 arch:x86

    14ac2fe5bd8ad9e8ade8545283cdabec


    Headers

    Imports

    Exports

    Sections

  • bin/format/mds.dll
    .dll windows:5 windows x86 arch:x86

    fd12786da2383f9378ac7fe021daadb6


    Headers

    Imports

    Exports

    Sections

  • bin/format/nrg.dll
    .dll windows:5 windows x86 arch:x86

    0cccfefbbdf8a14df6cd19016f39c972


    Headers

    Imports

    Exports

    Sections

  • bin/icores.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • bin/imageformats/qgif4.dll
    .dll windows:5 windows x86 arch:x86

    3fba836b5b92f0f0b35b7d606410a4e8


    Headers

    Imports

    Exports

    Sections

  • bin/imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    234648628dd4c8af896510b5a1ee61eb


    Headers

    Imports

    Exports

    Sections

  • bin/imageformats/qjpeg4.dll
    .dll windows:5 windows x86 arch:x86

    2b8f0f1c43b6c00454c57c763517d0fe


    Headers

    Imports

    Exports

    Sections

  • bin/imageformats/qsvg4.dll
    .dll windows:5 windows x86 arch:x86

    663f73b47dc1adaa8407a1351694cf56


    Headers

    Imports

    Exports

    Sections

  • bin/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    8854f076f54b914555538520497b053d


    Headers

    Imports

    Exports

    Sections

  • bin/mnt/WinisoCDBus32.sys
    .sys windows:5 windows x86 arch:x86

    d91f2254d2b2108190f34a78e96eebd3


    Code Sign

    Headers

    Imports

    Sections

  • bin/mnt/WinisoCDBus64.sys
    .sys windows:5 windows x64 arch:x64

    a6f71d6f0bbe881f5529ab92f60239db


    Code Sign

    Headers

    Imports

    Sections

  • bin/mnt/mnt.dll
    .dll windows:5 windows x86 arch:x86

    f7f836f75db99b83779922e73f3aa277


    Headers

    Imports

    Exports

    Sections

  • bin/mnt/wmnt.exe
    .exe windows:5 windows x86 arch:x86

    3ad8c5aded3ec6299adbd329460de10d


    Code Sign

    Headers

    Imports

    Sections

  • bin/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/updater.dll
    .dll windows:5 windows x86 arch:x86

    9b437ba7781c6a73ceb10ad9d30ad04a


    Headers

    Imports

    Exports

    Sections

  • bin/updater.exe
    .exe windows:5 windows x86 arch:x86

    1eaab2ad474aab9567c5b54f3a5acf11


    Code Sign

    Headers

    Imports

    Sections

  • bin/winiso.exe
    .exe windows:5 windows x86 arch:x86

    18569095b1dc56b3fba2ec928aa4cb8d


    Headers

    Imports

    Sections

  • uninst.exe.nsis
  • 使用前必看.txt
  • 起点下载.url