General

  • Target

    52e0923e8e48f5b43c0fda3dd70c7030_JaffaCakes118

  • Size

    2.7MB

  • MD5

    52e0923e8e48f5b43c0fda3dd70c7030

  • SHA1

    bd02809cee3c188853748aa2892646b4a1d303fa

  • SHA256

    b4166b8772af0c2082480a0fb3f75dc284e71354d1bdae629adc3f3b211dd49a

  • SHA512

    0f61bf2932c7a60b1eb981fe638fbf573d86bd9301e317b0f6db0eb3fd0f36ffd57d8d2ed428a89c3a5676ae4c812dec262d84b860ed6b8f77da364e811f40b6

  • SSDEEP

    49152:grCcK+gbjVoxRUYeGhSjIknXR3ubeeS19Zv5JypyL0e97aSd26SPHIAUZiqXd7YC:hljiLUp4SjRh3uE3Dyw397oPgAvqXRNP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 52e0923e8e48f5b43c0fda3dd70c7030_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    d23fbd09100caad5e10f17163f511668


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/QvodInit.exe
    .exe windows:4 windows x86 arch:x86

    0b2a31acea7c8272b8d6e27bd03aa847


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/left.bmp
  • $PLUGINSDIR/logo360.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/plugs.ini
  • $PLUGINSDIR/qvod1.ini
  • $PLUGINSDIR/sobar.bmp
  • $SYSDIR/pncrt.dll.new
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • 360Inst-qvod001.exe
    .exe windows:4 windows x86 arch:x86

    d0ffc56a0ec5bc8e7bdca94f37037f44


    Code Sign

    Headers

    Imports

    Sections

  • AddIn/ASBarBroker.exe
    .exe windows:4 windows x86 arch:x86

    8cb73f23fc4ffce04345bba981c347fe


    Code Sign

    Headers

    Imports

    Sections

  • AddIn/QvodAddr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c6079cff13dd538f8c2b93227d9d6d6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AddIn/conf.xml
    .xml
  • Baidu-Toolbar-utf8kb_cb.exe
    .exe windows:4 windows x86 arch:x86

    73b73e00f465fa1a2a3bf6377a40219b


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/BaiduBarX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    78760b90e51e152ef6c8a33a5e909edc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/RealMediaSplitter.ax.new
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Codecs/asfsplliter.ax.new
    .dll regsvr32 windows:4 windows x86 arch:x86

    61540ae4d5f1fe29babe6b430f77a241


    Headers

    Imports

    Exports

    Sections

  • NetAgent.dll.new
    .dll windows:4 windows x86 arch:x86

    f618d4cb4d41a461355f2eab6ae077ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodBand.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0e32a3b828b41920c248142fcbc590d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodInit.exe
    .exe windows:4 windows x86 arch:x86

    0b2a31acea7c8272b8d6e27bd03aa847


    Code Sign

    Headers

    Imports

    Sections

  • QvodInsert.dll.new
    .dll regsvr32 windows:4 windows x86 arch:x86

    b56249f6a8367bd8180830f0dae71472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodPlayer.exe
    .exe windows:4 windows x86 arch:x86

    2abfce40897f3cfc19cfe1b196778076


    Code Sign

    Headers

    Imports

    Sections

  • QvodTerminal.exe
    .exe windows:4 windows x86 arch:x86

    ab3720bea80ad42dc7af1b82fad3592a


    Code Sign

    Headers

    Imports

    Sections

  • ShareModule.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4d31033905b7f9799eebc95dce22db30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections