Overview

overview

10

Static

static

7

malware/1/Setup.exe

windows7-x64

10

malware/1/Setup.exe

windows10-2004-x64

10

malware/2/Setup.exe

windows7-x64

10

malware/2/Setup.exe

windows10-2004-x64

10

malware/3/...p_.exe

windows7-x64

7

malware/3/...p_.exe

windows10-2004-x64

7

malware/4/Setup.exe

windows7-x64

10

malware/4/Setup.exe

windows10-2004-x64

10

malware/5/...ls.dll

windows7-x64

1

malware/5/...ls.dll

windows10-2004-x64

1

malware/5/...ng.dll

windows7-x64

1

malware/5/...ng.dll

windows10-2004-x64

1

malware/5/...nt.dll

windows7-x64

1

malware/5/...nt.dll

windows10-2004-x64

1

malware/5/...pt.dll

windows7-x64

1

malware/5/...pt.dll

windows10-2004-x64

1

malware/5/...ib.dll

windows7-x64

1

malware/5/...ib.dll

windows10-2004-x64

1

malware/5/...ns.dll

windows7-x64

1

malware/5/...ns.dll

windows10-2004-x64

1

malware/5/...on.dll

windows7-x64

1

malware/5/...on.dll

windows10-2004-x64

1

malware/5/...op.dll

windows7-x64

3

malware/5/...op.dll

windows10-2004-x64

3

malware/5/...en.dll

windows7-x64

1

malware/5/...en.dll

windows10-2004-x64

1

malware/5/...te.dll

windows7-x64

1

malware/5/...te.dll

windows10-2004-x64

1

malware/5/...ty.dll

windows7-x64

1

malware/5/...ty.dll

windows10-2004-x64

1

malware/5/...api.js

windows7-x64

3

malware/5/...api.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e095c09c0839a85ecd84346a853c9c7333c51d1d0080ea41b5cee1f6f897c243

  • Size

    36.3MB

  • MD5

    2bc87d63f08f3083c32152b022d34a06

  • SHA1

    bbb29747804fa1cb16ce950b9c93a8d77801d460

  • SHA256

    e095c09c0839a85ecd84346a853c9c7333c51d1d0080ea41b5cee1f6f897c243

  • SHA512

    e5022940dfc08572f84f4ca1c2d763c3bb5c1ce9eec701d781081d0e04a3fd4f665334b17e1dc8220cb7fa3fa21638a895c60a5168099e3bca6b866bd1dc2ed2

  • SSDEEP

    786432:JmWO+snSUhLJXreRer6yhhSwTztExpaucJ+Ydu4uBdUNp:BiSUhLJXreRdyhfvaCeYdoc

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_e095c09c0839a85ecd84346a853c9c7333c51d1d0080ea41b5cee1f6f897c243
    .zip
  • malware/1/OfficeMainFileInfo.txt
  • malware/1/Setup.exe
    .exe windows:6 windows x86 arch:x86

    2cb8a2e45af1c372dbb79d88821792a5


    Headers

    Imports

    Sections

  • malware/1/langs/Croatian.ini
  • malware/1/langs/Danish.ini
  • malware/1/langs/English.ini
  • malware/1/langs/Finnish.ini
  • malware/1/langs/Hebrew.ini
  • malware/1/langs/Hungarian.ini
  • malware/1/langs/Indonesian.ini
  • malware/1/langs/Japanese.ini
  • malware/1/langs/Kazakh.ini
  • malware/1/langs/Korean.ini
  • malware/1/langs/Kurdish.ini
  • malware/1/langs/Norwegian.ini
  • malware/1/langs/SimpChinese.ini
  • malware/1/langs/Sinhala.ini
  • malware/1/langs/Slovak.ini
  • malware/1/langs/Swedish.ini
  • malware/1/langs/Thai.ini
  • malware/1/langs/TradChinese.ini
  • malware/1/langs/Ukrainian.ini
  • malware/1/langs/UyghurLatin.ini
  • malware/1/langs/Uzbek.ini
  • malware/1/langs/Vietnamese.ini
  • malware/2/Setup.exe
    .exe windows:6 windows x86 arch:x86

    c526e7dbff6b18f7ef128cd4f72319c9


    Headers

    Imports

    Sections

  • malware/3/free_sea_of_thieves_hacks_(esp_.exe
    .exe windows:6 windows x86 arch:x86

    e569e6f445d32ba23766ad67d1e3787f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/4/Setup.exe
    .exe windows:6 windows x86 arch:x86

    c526e7dbff6b18f7ef128cd4f72319c9


    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/#Rules.txt
  • malware/5/Data/Plug-ins/#Sample.txt
  • malware/5/Data/Plug-ins/Sample category/Readme.plg
  • malware/5/Data/Plug-ins/root/7 Sticky Notes.plg
  • malware/5/Data/Plug-ins/root/7-Zip.plg
  • malware/5/Data/Plug-ins/root/AIMP.plg
  • malware/5/Data/Plug-ins/root/AbiWord.plg
  • malware/5/Data/Plug-ins/root/Adguard.plg
  • malware/5/Data/Plug-ins/root/Adobe Brackets.plg
  • malware/5/Data/Plug-ins/root/Adobe Flash Player.plg
  • malware/5/Data/Plug-ins/root/Adobe Photoshop.plg
  • malware/5/Data/Plug-ins/root/Adobe Reader.plg
  • malware/5/Data/Plug-ins/root/Advanced SystemCare.plg
  • malware/5/Data/Plug-ins/root/AdwCleaner.plg
  • malware/5/Data/Plug-ins/root/Alcohol 120%.plg
  • malware/5/Data/Plug-ins/root/Any Video Converter.plg
  • malware/5/Data/Plug-ins/root/AnyDVD.plg
  • malware/5/Data/Plug-ins/root/AnyDesk.plg
  • malware/5/Data/Plug-ins/root/Ares.plg
  • malware/5/Data/Plug-ins/root/Audacity.plg
  • malware/5/Data/Plug-ins/root/AudioSwitcher.plg
  • malware/5/Data/Plug-ins/root/BSPlayer.plg
  • malware/5/Data/Plug-ins/root/Bandizip.plg
  • malware/5/Data/Plug-ins/root/Beyond Compare.plg
  • malware/5/Data/Plug-ins/root/BlueStacks.plg
  • malware/5/Data/Plug-ins/root/CCleaner.plg
  • malware/5/Data/Plug-ins/root/CDBurnerXP.plg
  • malware/5/Data/Plug-ins/root/CDex.plg
  • malware/5/Data/Plug-ins/root/Calibre.plg
  • malware/5/Data/Plug-ins/root/Cheat Engine.plg
  • malware/5/Data/Plug-ins/root/Citrix ICA Client.plg
  • malware/5/Data/Plug-ins/root/Classic Shell.plg
  • malware/5/Data/Plug-ins/root/CloneApp.plg
  • malware/5/Data/Plug-ins/root/CloneCD.plg
  • malware/5/Data/Plug-ins/root/Cobian Backup.plg
  • malware/5/Data/Plug-ins/root/Cybderduck.plg
  • malware/5/Data/Plug-ins/root/DUMo.plg
  • malware/5/Data/Plug-ins/root/Defraggler.plg
  • malware/5/Data/Plug-ins/root/DesktopOK.plg
  • malware/5/Data/Plug-ins/root/DisplayFusion.plg
  • malware/5/Data/Plug-ins/root/Download Master.plg
  • malware/5/Data/Plug-ins/root/Dropbox.plg
  • malware/5/Data/Plug-ins/root/EagleGet.plg
  • malware/5/Data/Plug-ins/root/Evernote.plg
  • malware/5/Data/Plug-ins/root/Everything.plg
  • malware/5/Data/Plug-ins/root/F.lux.plg
  • malware/5/Data/Plug-ins/root/FastStone Capture.plg
  • malware/5/Data/Plug-ins/root/FastStone Image Viewer.plg
  • malware/5/Data/Plug-ins/root/Fences.plg
  • malware/5/Data/Plug-ins/root/FileZilla.plg
  • malware/5/Data/Plug-ins/root/Foxit Reader.plg
  • malware/5/Data/Plug-ins/root/Free Download Manager 5.plg
  • malware/5/Data/Plug-ins/root/Free Download Manager.plg
  • malware/5/Data/Plug-ins/root/Free YouTube to MP3 Converter.plg
  • malware/5/Data/Plug-ins/root/FreeCommander.plg
  • malware/5/Data/Plug-ins/root/GIMP.plg
  • malware/5/Data/Plug-ins/root/GOM Player.plg
  • malware/5/Data/Plug-ins/root/Github Atom.plg
  • malware/5/Data/Plug-ins/root/Glary Utilities.plg
  • malware/5/Data/Plug-ins/root/Google Chrome.plg
  • malware/5/Data/Plug-ins/root/Google Drive.plg
  • malware/5/Data/Plug-ins/root/Google Earth.plg
  • malware/5/Data/Plug-ins/root/Google Picasa.plg
  • malware/5/Data/Plug-ins/root/Greenshot.plg
  • malware/5/Data/Plug-ins/root/Handbrake.plg
  • malware/5/Data/Plug-ins/root/HijackThis.plg
  • malware/5/Data/Plug-ins/root/IDM.plg
  • malware/5/Data/Plug-ins/root/IZArc.plg
  • malware/5/Data/Plug-ins/root/ImgBurn.plg
  • malware/5/Data/Plug-ins/root/InfraRecorder.plg
  • malware/5/Data/Plug-ins/root/Inkscape.plg
  • malware/5/Data/Plug-ins/root/Inno Setup.plg
  • malware/5/Data/Plug-ins/root/Installed Software.plg
  • malware/5/Data/Plug-ins/root/IrfanView.plg
  • malware/5/Data/Plug-ins/root/IsoBuster.plg
  • malware/5/Data/Plug-ins/root/JDownloader 2.plg
  • malware/5/Data/Plug-ins/root/JDownloader.plg
  • malware/5/Data/Plug-ins/root/Java.plg
  • malware/5/Data/Plug-ins/root/Junkware Removal Tool.plg
  • malware/5/Data/Plug-ins/root/KMPlayer.plg
  • malware/5/Data/Plug-ins/root/KeePass.plg
  • malware/5/Data/Plug-ins/root/Ketarin.plg
  • malware/5/Data/Plug-ins/root/Kodi.plg
  • malware/5/Data/Plug-ins/root/Launchy.plg
  • malware/5/Data/Plug-ins/root/LibreOffice.plg
  • malware/5/Data/Plug-ins/root/MP3tag.plg
  • malware/5/Data/Plug-ins/root/MPC-BE.plg
  • malware/5/Data/Plug-ins/root/MPC-HC.plg
  • malware/5/Data/Plug-ins/root/MailWasher.plg
  • malware/5/Data/Plug-ins/root/Malwarebytes Anti-Malware.plg
  • malware/5/Data/Plug-ins/root/Maxthon Cloud Browser.plg
  • malware/5/Data/Plug-ins/root/MediaMonkey.plg
  • malware/5/Data/Plug-ins/root/Microsoft Edge Favorites.plg
  • malware/5/Data/Plug-ins/root/Microsoft Edge.plg
  • malware/5/Data/Plug-ins/root/Microsoft Internet Explorer Cookies.plg
  • malware/5/Data/Plug-ins/root/Microsoft Internet Explorer Favorites.plg
  • malware/5/Data/Plug-ins/root/Microsoft Internet Explorer Send To.plg
  • malware/5/Data/Plug-ins/root/Microsoft Internet Explorer.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office 2010 Activation.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Excel 2010.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Excel 2013.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Excel 2016.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office OneNote 2010.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office OneNote 2013.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office OneNote 2016.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Outlook 2010.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Outlook 2013.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Outlook 2016.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office PowerPoint 2010.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office PowerPoint 2013.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office PowerPoint 2016.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Word 2010.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Word 2013.plg
  • malware/5/Data/Plug-ins/root/Microsoft Office Word 2016.plg
  • malware/5/Data/Plug-ins/root/Miranda IM.plg
  • malware/5/Data/Plug-ins/root/Mozilla Firefox Bookmarks.plg
  • malware/5/Data/Plug-ins/root/Mozilla Firefox.plg
  • malware/5/Data/Plug-ins/root/Mozilla Thunderbird.plg
  • malware/5/Data/Plug-ins/root/Mozy.plg
  • malware/5/Data/Plug-ins/root/Mumble.plg
  • malware/5/Data/Plug-ins/root/MusicBee.plg
  • malware/5/Data/Plug-ins/root/MyPhoneExplorer.plg
  • malware/5/Data/Plug-ins/root/Nitro Reader.plg
  • malware/5/Data/Plug-ins/root/Notepad++.plg
  • malware/5/Data/Plug-ins/root/O&O Defrag.plg
  • malware/5/Data/Plug-ins/root/OpenOffice.plg
  • malware/5/Data/Plug-ins/root/Opera.plg
  • malware/5/Data/Plug-ins/root/PDF Split and Merge.plg
  • malware/5/Data/Plug-ins/root/PDF-XChange Editor.plg
  • malware/5/Data/Plug-ins/root/PDF24 Creator.plg
  • malware/5/Data/Plug-ins/root/PDFCreator.plg
  • malware/5/Data/Plug-ins/root/PTGui.plg
  • malware/5/Data/Plug-ins/root/Paint.NET.plg
  • malware/5/Data/Plug-ins/root/Pale Moon.plg
  • malware/5/Data/Plug-ins/root/PeaZip.plg
  • malware/5/Data/Plug-ins/root/PhotoScape.plg
  • malware/5/Data/Plug-ins/root/PicPick.plg
  • malware/5/Data/Plug-ins/root/Pidgin.plg
  • malware/5/Data/Plug-ins/root/Plex Media Server.plg
  • malware/5/Data/Plug-ins/root/PotPlayer.plg
  • malware/5/Data/Plug-ins/root/PowerArchiver.plg
  • malware/5/Data/Plug-ins/root/PrivaZer.plg
  • malware/5/Data/Plug-ins/root/Process Explorer.plg
  • malware/5/Data/Plug-ins/root/Process Lasso.plg
  • malware/5/Data/Plug-ins/root/Product Keys.plg
  • malware/5/Data/Plug-ins/root/PuTTY.plg
  • malware/5/Data/Plug-ins/root/Q-Dir.plg
  • malware/5/Data/Plug-ins/root/QuickTime.plg
  • malware/5/Data/Plug-ins/root/QuiteRSS.plg
  • malware/5/Data/Plug-ins/root/RJ TextEd.plg
  • malware/5/Data/Plug-ins/root/Rainmeter.plg
  • malware/5/Data/Plug-ins/root/Recuva.plg
  • malware/5/Data/Plug-ins/root/Resource Hacker.plg
  • malware/5/Data/Plug-ins/root/SMPlayer.plg
  • malware/5/Data/Plug-ins/root/STDU Viewer.plg
  • malware/5/Data/Plug-ins/root/SUMo.plg
  • malware/5/Data/Plug-ins/root/SUPERAntiSpyware.plg
  • malware/5/Data/Plug-ins/root/Samsung Kies.plg
  • malware/5/Data/Plug-ins/root/Sandboxie.plg
  • malware/5/Data/Plug-ins/root/Shareaza.plg
  • malware/5/Data/Plug-ins/root/Skype.plg
  • malware/5/Data/Plug-ins/root/SlimBrowser.plg
  • malware/5/Data/Plug-ins/root/Smart Defrag.plg
  • malware/5/Data/Plug-ins/root/SmartFTP.plg
  • malware/5/Data/Plug-ins/root/SnagIt.plg
  • malware/5/Data/Plug-ins/root/Speccy.plg
  • malware/5/Data/Plug-ins/root/SpyBot - Search & Destroy.plg
  • malware/5/Data/Plug-ins/root/Stardock.plg
  • malware/5/Data/Plug-ins/root/Start Menu 8.plg
  • malware/5/Data/Plug-ins/root/Steam.plg
  • malware/5/Data/Plug-ins/root/Stellarium.plg
  • malware/5/Data/Plug-ins/root/Sublime Text.plg
  • malware/5/Data/Plug-ins/root/SumatraPDF.plg
  • malware/5/Data/Plug-ins/root/SyncBackFree.plg
  • malware/5/Data/Plug-ins/root/Syncovery Pro.plg
  • malware/5/Data/Plug-ins/root/System Ninja.plg
  • malware/5/Data/Plug-ins/root/TeamSpeak.plg
  • malware/5/Data/Plug-ins/root/TeamViewer.plg
  • malware/5/Data/Plug-ins/root/TeraCopy.plg
  • malware/5/Data/Plug-ins/root/Tha Bat!.plg
  • malware/5/Data/Plug-ins/root/TortoiseSVN.plg
  • malware/5/Data/Plug-ins/root/Total Uninstall.plg
  • malware/5/Data/Plug-ins/root/Trillian.plg
  • malware/5/Data/Plug-ins/root/TrueCrypt.plg
  • malware/5/Data/Plug-ins/root/TweetDeck.plg
  • malware/5/Data/Plug-ins/root/UltraISO.plg
  • malware/5/Data/Plug-ins/root/UltraVNC.plg
  • malware/5/Data/Plug-ins/root/VLC media player.plg
  • malware/5/Data/Plug-ins/root/VeraCrypt.plg
  • malware/5/Data/Plug-ins/root/VirtualBox.plg
  • malware/5/Data/Plug-ins/root/Vivaldi.plg
  • malware/5/Data/Plug-ins/root/Vuze.plg
  • malware/5/Data/Plug-ins/root/Web Browser Passwords.plg
  • malware/5/Data/Plug-ins/root/WinDirStat.plg
  • malware/5/Data/Plug-ins/root/WinMerge.plg
  • malware/5/Data/Plug-ins/root/WinRAR.plg
  • malware/5/Data/Plug-ins/root/WinSCP.plg
  • malware/5/Data/Plug-ins/root/WinZip.plg
  • malware/5/Data/Plug-ins/root/Winamp.plg
  • malware/5/Data/Plug-ins/root/Window Blinds.plg
  • malware/5/Data/Plug-ins/root/Windows Account Pictures.plg
  • malware/5/Data/Plug-ins/root/Windows Command Prompt.plg
  • malware/5/Data/Plug-ins/root/Windows Contacts.plg
  • malware/5/Data/Plug-ins/root/Windows Desktop.plg
  • malware/5/Data/Plug-ins/root/Windows Documents.plg
  • malware/5/Data/Plug-ins/root/Windows Downloads.plg
  • malware/5/Data/Plug-ins/root/Windows Explorer.plg
  • malware/5/Data/Plug-ins/root/Windows Firewall.plg
  • malware/5/Data/Plug-ins/root/Windows Hosts.plg
  • malware/5/Data/Plug-ins/root/Windows Libraries.plg
  • malware/5/Data/Plug-ins/root/Windows Links.plg
  • malware/5/Data/Plug-ins/root/Windows Local Group Policy.plg
  • malware/5/Data/Plug-ins/root/Windows Mail.plg
  • malware/5/Data/Plug-ins/root/Windows Media Player.plg
  • malware/5/Data/Plug-ins/root/Windows Music.plg
  • malware/5/Data/Plug-ins/root/Windows Network Credentials.plg
  • malware/5/Data/Plug-ins/root/Windows Network.plg
  • malware/5/Data/Plug-ins/root/Windows ODBC Connections.plg
  • malware/5/Data/Plug-ins/root/Windows OneDrive.plg
  • malware/5/Data/Plug-ins/root/Windows Pictures.plg
  • malware/5/Data/Plug-ins/root/Windows Public Desktop.plg
  • malware/5/Data/Plug-ins/root/Windows Public Documents.plg
  • malware/5/Data/Plug-ins/root/Windows Public Downloads.plg
  • malware/5/Data/Plug-ins/root/Windows Public Music.plg
  • malware/5/Data/Plug-ins/root/Windows Public Pictures.plg
  • malware/5/Data/Plug-ins/root/Windows Public Videos.plg
  • malware/5/Data/Plug-ins/root/Windows Quick Launch.plg
  • malware/5/Data/Plug-ins/root/Windows Run List.plg
  • malware/5/Data/Plug-ins/root/Windows Saved Games.plg
  • malware/5/Data/Plug-ins/root/Windows Searches.plg
  • malware/5/Data/Plug-ins/root/Windows Send To.plg
  • malware/5/Data/Plug-ins/root/Windows Sidebar.plg
  • malware/5/Data/Plug-ins/root/Windows Startmenu.plg
  • malware/5/Data/Plug-ins/root/Windows System Utilities.plg
  • malware/5/Data/Plug-ins/root/Windows Taskbar.plg
  • malware/5/Data/Plug-ins/root/Windows Themes.plg
  • malware/5/Data/Plug-ins/root/Windows Videos.plg
  • malware/5/Data/Plug-ins/root/Windows Window Metrics.plg
  • malware/5/Data/Plug-ins/root/Winstep NeXus.plg
  • malware/5/Data/Plug-ins/root/Winyl.plg
  • malware/5/Data/Plug-ins/root/Wireless Network Keys.plg
  • malware/5/Data/Plug-ins/root/Wireshark.plg
  • malware/5/Data/Plug-ins/root/Wise Disk Cleaner.plg
  • malware/5/Data/Plug-ins/root/XnView.plg
  • malware/5/Data/Plug-ins/root/cFosSpeed.plg
  • malware/5/Data/Plug-ins/root/data/BIBUtils.dll
    .dll windows:6 windows x64 arch:x64

    4ca0a86428c07200e81af54fe58580cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/CITThreading.dll
    .dll windows:6 windows x64 arch:x64

    97496aa4628a1bb046446e96cadab9b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/CRClient.dll
    .dll windows:6 windows x64 arch:x64

    4a771c9af491309114263cd5a03e144c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/ExtendScript.dll
    .dll windows:6 windows x64 arch:x64

    314111a04f6feaa7e9ecbbad38112188


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/JP2KLib.dll
    .dll windows:6 windows x64 arch:x64

    219f9de4f502dff7700e78df04ecccb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/Microsoft.Expression.Interactions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/Microsoft.VC90.CRT.manifest
    .xml
  • malware/5/Data/Plug-ins/root/data/Microsoft.VC90.MFC.manifest
    .xml
  • malware/5/Data/Plug-ins/root/data/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/SQLite.Interop.dll
    .dll windows:5 windows x86 arch:x86

    43cf4064308c8cffa2acc646c51eabf0


    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/SharpRaven.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/System.Windows.Interactivity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/api
    .gif
  • malware/5/Data/Plug-ins/root/data/api.work
    .js
  • malware/5/Data/Plug-ins/root/data/boost_date_time.dll
    .dll windows:6 windows x64 arch:x64

    7b4f99e79f786ffcb14fe05bed0344f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/boost_filesystem.dll
    .dll windows:6 windows x64 arch:x64

    6d033e3ee94dcaf1e6576bb099bf26d4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/boost_system.dll
    .dll windows:6 windows x64 arch:x64

    00ccd643ca642b5fd9ee93bbc2c1e12a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/boost_threads.dll
    .dll windows:6 windows x64 arch:x64

    674347af433f9af177fb6e6014ad49c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/cr_win_client_config.cfg
  • malware/5/Data/Plug-ins/root/data/dnssd.dll
    .dll windows:6 windows x64 arch:x64

    975426068814fc7f33db9f683ae95890


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvaappsupport.dll
    .dll windows:6 windows x64 arch:x64

    369a0e6100651d493b3693dccb410b73


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvaaudiodevice.dll
    .dll windows:6 windows x64 arch:x64

    5ea31724bbd1991a529fcde0e09ca187


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvacrashhandler.dll
    .dll windows:6 windows x64 arch:x64

    c8b9d09f76174384e419400e888df652


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvamarshal.dll
    .dll windows:6 windows x64 arch:x64

    7d765823c4773573fc6ed3d140559daa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvamediatypes.dll
    .dll windows:6 windows x64 arch:x64

    b1263f4cead5e959c4c189b6edd8292e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvametadataapi.dll
    .dll windows:6 windows x64 arch:x64

    d60cd6b38a40d696ff92caea259447d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvametadataui.dll
    .dll windows:6 windows x64 arch:x64

    28c7c7d1d13af427d703dc4a7a89a9b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvaplayer.dll
    .dll windows:6 windows x64 arch:x64

    8a715318538c5af8c1614509033062c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvascripting.dll
    .dll windows:6 windows x64 arch:x64

    973c98da3cec7db8d240cdfee57e1d34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvatransport.dll
    .dll windows:6 windows x64 arch:x64

    f361aea2068063a96eeed55e91323c9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvaui.dll
    .dll windows:6 windows x64 arch:x64

    34c55c9c36ce4b562d8b493c5c90b4ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dvaunittesting.dll
    .dll windows:6 windows x64 arch:x64

    769d663f51a8c4159f04c9d3ae3e6264


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/dynamiclink.dll
    .dll windows:6 windows x64 arch:x64

    f6d949409f71ac63b2d6a1b50ab3283e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/format_reader.dll
    .dll windows:6 windows x64 arch:x64

    662ee6a43dc327cbf0aa4fed9417c02a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/icucnv64.dll
    .dll windows:6 windows x64 arch:x64

    44289b7f515466967439559d17041ce9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/icuuc64.dll
    .dll windows:6 windows x64 arch:x64

    fb8c9db133dc6f07b0933ce59b054060


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/igestep30.dll
    .dll windows:6 windows x64 arch:x64

    9e196af6fee92537f15d830d8165f53c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/inference_engine.dll
    .dll windows:6 windows x64 arch:x64

    92a4a36108d6324353c425f7da92b712


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/kerneld.ia64
  • malware/5/Data/Plug-ins/root/data/kerneld.v64
    .sys windows:6 windows x64 arch:x64

    fd295cdeb4c0d5d8f45aaa5c66357108


    Code Sign

    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/kerneld.w9x
  • malware/5/Data/Plug-ins/root/data/kerneld.x32
    .sys windows:6 windows x86 arch:x86

    b64e264f8d3b44955b5da8cde296175f


    Code Sign

    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/kerneld.x64
    .sys windows:6 windows x64 arch:x64

    ab5ec4188258ef7551fe4e05768f50d6


    Code Sign

    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/lib3mfc.dll
    .dll windows:6 windows x64 arch:x64

    edd7fe6010bef84269f85861fd65c2c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/libEGL.dll
    .dll windows:6 windows x64 arch:x64

    2571158206a6160a4e001934364aa256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    7dadd2831e69b1b3c42a4ffb303627d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    62358ddd35940bae63265912e12069cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/libifcoremd.dll
    .dll windows:4 windows x64 arch:x64

    9b14b7fa019c28e47846cb285d611b05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/libiomp5md.dll
    .dll windows:6 windows x64 arch:x64

    816120f8e921805f79f1dc53b6944d2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/libmbedcrypto.dll
    .dll windows:4 windows x64 arch:x64

    f30bc4437fed35e4e7774f26d00442c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/libmmd.dll
    .dll windows:5 windows x64 arch:x64

    9df0a85697384eb270a83967b08fa15e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/lpstemp.rdf
  • malware/5/Data/Plug-ins/root/data/mfc90.dll
    .dll windows:5 windows x86 arch:x86

    f2d8030f2fb5ae92ea26c320740a673b


    Code Sign

    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    814d9e5c82b805568941908a38d8a5f5


    Code Sign

    Headers

    Imports

    Sections

  • malware/5/Data/Plug-ins/root/data/mfcm90.dll
    .dll windows:5 windows x86 arch:x86

    7dabdb1d81bc318202cca27aed9c03e6


    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/mfcm90u.dll
    .dll windows:5 windows x86 arch:x86

    8835e897cda95e4221fbfed49b505c04


    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • malware/5/Data/Plug-ins/root/data/nts
    .js
  • malware/5/Data/Plug-ins/root/eMule.plg
  • malware/5/Data/Plug-ins/root/foobar2000.plg
  • malware/5/Data/Plug-ins/root/iTunes.plg
  • malware/5/Data/Plug-ins/root/mIRC.plg
  • malware/5/Data/Plug-ins/root/mRemoteNG.plg
  • malware/5/Data/Plug-ins/root/qBittorent.plg
  • malware/5/Data/Plug-ins/root/uTorrent.plg
  • malware/5/Data/cloneapp.ico
  • malware/5/Data/debug.txt
  • malware/5/Data/project.xml
    .xml
  • malware/5/Data/remote_settings.ini
  • malware/5/Engine.dll
    .dll windows:5 windows x64 arch:x64

    84f0be4fead8f529deb9fc674f592461


    Headers

    Imports

    Exports

    Sections

  • malware/5/Setup.exe
    .exe windows:6 windows x86 arch:x86

    b5af53b96a03972def1a5f287c0c1d5c


    Headers

    Imports

    Exports

    Sections