Overview

overview

7

Static

static

3

3f437b8cc6...18.exe

windows7-x64

7

3f437b8cc6...18.exe

windows10-2004-x64

7

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/XML.dll

windows7-x64

3

$PLUGINSDIR/XML.dll

windows10-2004-x64

3

Resource/C...txt.js

windows7-x64

3

Resource/C...txt.js

windows10-2004-x64

3

Resource/D...ni.vbs

windows7-x64

1

Resource/D...ni.vbs

windows10-2004-x64

1

Resource/Q...lp.htm

windows7-x64

3

Resource/Q...lp.htm

windows10-2004-x64

3

Resource/RESOURCE.htm

windows7-x64

3

Resource/RESOURCE.htm

windows10-2004-x64

3

User/Colle...ipt.js

windows7-x64

3

User/Colle...ipt.js

windows10-2004-x64

3

User/DownManager.vbs

windows7-x64

1

User/DownManager.vbs

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

ǡʱ...��.exe

windows7-x64

3

ǡʱ...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f437b8cc69dcb9906efdd567656033a_JaffaCakes118

  • Size

    566KB

  • MD5

    3f437b8cc69dcb9906efdd567656033a

  • SHA1

    7d16bccdf2c516d7a3f9958f6fc43fb83d487db1

  • SHA256

    a1e9be25bda3594d5f2ab0a8648b2b16b8439fae437f5edd18947f359cecddad

  • SHA512

    cdf9de88610c16e0441e4a10ae324fc05a26f3ddfc875e2fe1262317b0b6db591108feafc5fd65678076ba90cdcc33f387674c604cecae00b76a2907e3cca2f8

  • SSDEEP

    12288:V7vM8/vMHem1wPFBR9mJl7ALCagJfmbu8rNdM:V7U8/0D1w9T9sALCJJfWuGM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 3f437b8cc69dcb9906efdd567656033a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/XML.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Groups/order.txt
  • Groups/ϵͳļ.cgp
  • Groups/Żվ.cgp
  • Groups/վ.cgp
  • Language/ChineseGB.ini
  • Resource/CollectorScript.txt.default
    .js
  • Resource/DownManager.ini.default
    .vbs
  • Resource/Filter.ini.default
  • Resource/KillFly.htm
    .html .js polyglot
  • Resource/PopFilter.WAV
  • Resource/Proxy.ini.default
  • Resource/QiabiBrowser.ini.default
  • Resource/QiabiHelp.htm
  • Resource/RESOURCE.HTM
    .html
  • Resource/SearchEngine.ini.default
  • Resource/baidu.ico
  • Resource/google.ico
  • Skin/Default/BackGround.bmp
  • Skin/Default/FavBar.bmp
  • Skin/Default/Go.bmp
  • Skin/Default/MainAnimIcon.bmp
  • Skin/Default/MainMenu.bmp
  • Skin/Default/MainTool16.bmp
  • Skin/Default/MainTool24.bmp
  • Skin/Default/MainToolGray16.bmp
  • Skin/Default/MainToolGray24.bmp
  • Skin/Default/SearchBar.bmp
  • Skin/Default/StatusTool.bmp
  • Skin/Default/SystemBar.bmp
  • Skin/Default/TaskBar.bmp
  • User/CollectorScript.txt
    .js
  • User/DownManager.ini
    .vbs
  • User/Filter.ini
  • User/LastVisit.ini
  • User/Proxy.ini
  • User/QiabiBrowser.ini
  • User/SearchEngine.ini
  • User/wish.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • ǡʱ.exe
    .exe windows:4 windows x86 arch:x86

    ea517b117559bd76a74bb9ae9fde8d5f


    Headers

    Imports

    Exports

    Sections