General

  • Target

    f2545bc5f9c4f4cd44952ef2f1b1d792_JaffaCakes118

  • Size

    5.3MB

  • MD5

    f2545bc5f9c4f4cd44952ef2f1b1d792

  • SHA1

    2e423a4ec289522bebbd878b006d1d5eaca3bca8

  • SHA256

    e44531bb4fe8aaa2c6080b19ad0fb56ae879c1c3ef6f97b01ebaa5812121d47f

  • SHA512

    8c2aa4b81adfe129695e9ab7954f96e93289f7b09839aaf1a259074d975bbc218d09bfe6596fb6199f3e5ed58f68df0ad6869cf2d5e8c2c6abd43998f326e809

  • SSDEEP

    98304:h/zGsGxTEqD+TwtlZZGOjz7JYX9cSPKedH+o9YVDfrXHFHNjAYgFe:FgTEqD+TWZgEPSPK8H+cYVDjXHFFARe

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • f2545bc5f9c4f4cd44952ef2f1b1d792_JaffaCakes118
    .rar
  • Keygen-dvt.exe
    .exe windows:4 windows x86 arch:x86

    ecd707aa7c178056fd4e77ec2cbaece1


    Headers

    Imports

    Sections

  • wxp_3beta.exe
    .exe windows:4 windows x86 arch:x86

    55f3dfd13c0557d3e32bcbc604441dd3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • CamControl.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • EXAMPLE_IPCAM_TEMPLATE.wxp
  • EXAMPLE_SERIALPTZ_TEMPLATE.wxp
  • GeoIP.dat
  • HTTP_POST_EXAMPLES.zip
    .zip
  • ASP_receive.asp
    .vbs
  • HTML_upload_test.html
    .html
  • PHP_receive.php
  • PHP_upload_with_FTP.php
  • PHP_upload_without_ftp.php
  • IPCamera.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    17abb549acfb6aa57505ed11dfcd0673


    Headers

    Imports

    Exports

    Sections

  • OverlayXP.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    416d5a2e05c5c05db9c97429c7a42eaa


    Headers

    Imports

    Exports

    Sections

  • SubsObjects.dll
    .dll windows:4 windows x86 arch:x86

    d06809972e063852ae017b46de4b4b1c


    Headers

    Imports

    Exports

    Sections

  • WM9Profiles/High motion video for broadband NTSC (1500 Kbps total).prx
  • WM9Profiles/High motion video for broadband NTSC (384 Kbps).prx
  • WM9Profiles/High motion video for broadband NTSC (768 Kbps).prx
  • WM9Profiles/NoAudio/WMV7 1200KB.prx
  • WM9Profiles/NoAudio/WMV7 600KB.prx
  • WM9Profiles/NoAudio/WMV8 1000KB.prx
  • WM9Profiles/NoAudio/WMV9 1000KB.prx
  • WM9Profiles/NoAudio/WMV9 600KB.prx
  • WM9Profiles/Video for broadband PAL (384 Kbps).prx
  • WM9Profiles/Video for broadband PAL (768 Kbps).prx
  • WM9Profiles/WM8 Video for DSLCable Delivery (250Kbps 320x240 30fps).prx
  • WM9Profiles/WM8 Video for DSLCable Delivery (500Kbps 320x240 30fps).prx
  • WM9Profiles/WM8 Video for LAN Delivery (100Kbps 240x180 15fps).prx
  • WM9Profiles/WM9 High 650KB.prx
  • WM9Profiles/WM9 Single 700KB.prx
  • WM9Profiles/WMV7 WMA9 1200KB.prx
  • WM9Profiles/WMV7 WMA9 600KB.prx
  • WM9Profiles/WMV8 WMA9 1000KB.prx
  • WM9Profiles/WMV9 WMA9 1000KB.prx
  • WM9Profiles/WMV9 WMA9 600KB.prx
  • chat.wav
  • flags/Thumbs.db
  • flags/af.gif
    .gif
  • flags/al.gif
    .gif
  • flags/am.gif
    .gif
  • flags/an.gif
    .gif
  • flags/ao.gif
    .gif
  • flags/ar.gif
    .gif
  • flags/at.gif
    .gif
  • flags/au.gif
    .gif
  • flags/aw.gif
    .gif
  • flags/az.gif
    .gif
  • flags/ba.gif
    .gif
  • flags/bb.gif
    .gif
  • flags/bd.gif
    .gif
  • flags/be.gif
    .gif
  • flags/bf.gif
    .gif
  • flags/bg.gif
    .gif
  • flags/bh.gif
    .gif
  • flags/bi.gif
    .gif
  • flags/bj.gif
    .gif
  • flags/bm.gif
    .gif
  • flags/bn.gif
    .gif
  • flags/bo.gif
    .gif
  • flags/br.gif
    .gif
  • flags/bs.gif
    .gif
  • flags/bt.gif
    .gif
  • flags/bw.gif
    .gif
  • flags/by.gif
    .gif
  • flags/bz.gif
    .gif
  • flags/ca.gif
    .gif
  • flags/cf.gif
    .gif
  • flags/cg.gif
    .gif
  • flags/ch.gif
    .gif
  • flags/ci.gif
    .gif
  • flags/ck.gif
    .gif
  • flags/cl.gif
    .gif
  • flags/cm.gif
    .gif
  • flags/cn.gif
    .gif
  • flags/co.gif
    .gif
  • flags/cr.gif
    .gif
  • flags/cu.gif
    .gif
  • flags/cv.gif
    .gif
  • flags/cy.gif
    .gif
  • flags/cz.gif
    .gif
  • flags/de.gif
    .gif
  • flags/dk.gif
    .gif
  • flags/dz.gif
    .gif
  • flags/ec.gif
    .gif
  • flags/ee.gif
    .gif
  • flags/eg.gif
    .gif
  • flags/empty.gif
    .gif
  • flags/er.gif
    .gif
  • flags/es.gif
    .gif
  • flags/et.gif
    .gif
  • flags/fi.gif
    .gif
  • flags/fj.gif
    .gif
  • flags/fo.gif
    .gif
  • flags/fr.gif
    .gif
  • flags/ga.gif
    .gif
  • flags/gb.gif
    .gif
  • flags/ge.gif
    .gif
  • flags/gi.gif
    .gif
  • flags/gl.gif
    .gif
  • flags/gp.gif
    .gif
  • flags/gr.gif
    .gif
  • flags/gs.gif
    .gif
  • flags/gt.gif
    .gif
  • flags/gu.gif
    .gif
  • flags/gy.gif
    .gif
  • flags/hk.gif
    .gif
  • flags/hr.gif
    .gif
  • flags/ht.gif
    .gif
  • flags/hu.gif
    .gif
  • flags/id.gif
    .gif
  • flags/ie.gif
    .gif
  • flags/il.gif
    .gif
  • flags/in.gif
    .gif
  • flags/iq.gif
    .gif
  • flags/ir.gif
    .gif
  • flags/is.gif
    .gif
  • flags/it.gif
    .gif
  • flags/jm.gif
    .gif
  • flags/jo.gif
    .gif
  • flags/jp.gif
    .gif
  • flags/ke.gif
    .gif
  • flags/kg.gif
    .gif
  • flags/kh.gif
    .gif
  • flags/ki.gif
    .gif
  • flags/kp.gif
    .gif
  • flags/kr.gif
    .gif
  • flags/ky.gif
    .gif
  • flags/kz.gif
    .gif
  • flags/lb.gif
    .gif
  • flags/lc.gif
    .gif
  • flags/lk.gif
    .gif
  • flags/lt.gif
    .gif
  • flags/lu.gif
    .gif
  • flags/lv.gif
    .gif
  • flags/ly.gif
    .gif
  • flags/ma.gif
    .gif
  • flags/mc.gif
    .gif
  • flags/md.gif
    .gif
  • flags/mg.gif
    .gif
  • flags/mn.gif
    .gif
  • flags/mo.gif
    .gif
  • flags/mp.gif
    .gif
  • flags/ms.gif
    .gif
  • flags/mt.gif
    .gif
  • flags/mx.gif
    .gif
  • flags/my.gif
    .gif
  • flags/mz.gif
    .gif
  • flags/na.gif
    .gif
  • flags/nc.gif
    .gif
  • flags/nf.gif
    .gif
  • flags/nl.gif
    .gif
  • flags/no.gif
    .gif
  • flags/np.gif
    .gif
  • flags/nr.gif
    .gif
  • flags/nz.gif
    .gif
  • flags/om.gif
    .gif
  • flags/pa.gif
    .gif
  • flags/pe.gif
    .gif
  • flags/pf.gif
    .gif
  • flags/ph.gif
    .gif
  • flags/pk.gif
    .gif
  • flags/pl.gif
    .gif
  • flags/pm.gif
    .gif
  • flags/pr.gif
    .gif
  • flags/pt.gif
    .gif
  • flags/py.gif
    .gif
  • flags/qa.gif
    .gif
  • flags/ro.gif
    .gif
  • flags/ru.gif
    .gif
  • flags/sa.gif
    .gif
  • flags/sb.gif
    .gif
  • flags/sd.gif
    .gif
  • flags/se.gif
    .gif
  • flags/sg.gif
    .gif
  • flags/si.gif
    .gif
  • flags/sk.gif
    .gif
  • flags/sl.gif
    .gif
  • flags/so.gif
    .gif
  • flags/sr.gif
    .gif
  • flags/sy.gif
    .gif
  • flags/sz.gif
    .gif
  • flags/tc.gif
    .gif
  • flags/tg.gif
    .gif
  • flags/th.gif
    .gif
  • flags/tn.gif
    .gif
  • flags/to.gif
    .gif
  • flags/tp.gif
    .gif
  • flags/tr.gif
    .gif
  • flags/tt.gif
    .gif
  • flags/tv.gif
    .gif
  • flags/tw.gif
    .gif
  • flags/tz.gif
    .gif
  • flags/ua.gif
    .gif
  • flags/ug.gif
    .gif
  • flags/us.gif
    .gif
  • flags/uy.gif
    .gif
  • flags/va.gif
    .gif
  • flags/ve.gif
    .gif
  • flags/vg.gif
    .gif
  • flags/vi.gif
    .gif
  • flags/vn.gif
    .gif
  • flags/wf.gif
    .gif
  • flags/ws.gif
    .gif
  • flags/ye.gif
    .gif
  • flags/yu.gif
    .gif
  • flags/za.gif
    .gif
  • flags/zw.gif
    .gif
  • incoming.wav
  • ipcams/[webcamXP jpeg mode].wxp
  • ipcams/[webcamXP mjpeg mode].wxp
  • ipcams/airlink101 aic250 network camera.wxp
  • ipcams/avermedia nc100 ip camera.wxp
  • ipcams/aviosys ip camera 9060 (mjpeg mode).wxp
  • ipcams/aviosys ip camera 9100 (mjpeg mode).wxp
  • ipcams/aviosys ip camera.wxp
  • ipcams/aviosys ip kamera 9060 (mjpeg mode).wxp
  • ipcams/aviosys ip kamera 9100 (mjpeg mode).wxp
  • ipcams/aviosys ip kamera.wxp
  • ipcams/axis camera (mjpeg mode).wxp
  • ipcams/axis camera 213 with ptz (mjpeg mode) (320x240).wxp
  • ipcams/axis camera 213 with ptz (mjpeg mode) (640x480).wxp
  • ipcams/axis camera 213 with ptz (mjpeg mode) (default res).wxp
  • ipcams/axis camera 213 with ptz.wxp
  • ipcams/axis camera.wxp
  • ipcams/axis multi camera 241q, 2400 (mjpeg mode).wxp
  • ipcams/axis multi camera 241q, 2400.wxp
  • ipcams/axis video server.wxp
  • ipcams/canon network camera (mjpeg mode).wxp
  • ipcams/canon network camera.wxp
  • ipcams/creative live! wireless.wxp
  • ipcams/d-link dcs-1000.wxp
  • ipcams/d-link dcs-2000.wxp
  • ipcams/d-link dcs-2100.wxp
  • ipcams/d-link dcs-5300 high quality.wxp
  • ipcams/d-link dcs-5300 low quality.wxp
  • ipcams/d-link dcs-5300 medium quality.wxp
  • ipcams/d-link dcs-6620.wxp
  • ipcams/d-link dcs-900.wxp
  • ipcams/d-link internet camera.wxp
  • ipcams/elmo 200 (mjpeg mode).wxp
  • ipcams/elmo 200.wxp
  • ipcams/elmo 400.wxp
  • ipcams/eltis et-1001 ip camera.wxp
  • ipcams/flexwatch network camera.wxp
  • ipcams/gadget-spot ip camera.wxp
  • ipcams/gadspot gs9684.wxp
  • ipcams/grand ip camera ii.wxp
  • ipcams/grandtec ip camera.wxp
  • ipcams/hawking nc1000.wxp
  • ipcams/hawking nc200.wxp
  • ipcams/hawking nc300 (mjpeg mode).wxp
  • ipcams/hawking nc300.wxp
  • ipcams/hawking nc800.wxp
  • ipcams/hunt lan camera.wxp
  • ipcams/i-catcher icc (mjpeg mode).wxp
  • ipcams/i-catcher icc.wxp
  • ipcams/i-catcher ics (mjpeg mode).wxp
  • ipcams/i-catcher ics.wxp
  • ipcams/i-catcher icv.wxp
  • ipcams/intellinet 550710.wxp
  • ipcams/iqeye300 series.wxp
  • ipcams/iqeye501 series.wxp
  • ipcams/iqeye600 series.wxp
  • ipcams/jvc network camera.wxp
  • ipcams/kingwave kw3715 kw3716.wxp
  • ipcams/kw3701 cmos wired.wxp
  • ipcams/kw3702 cmos wireless.wxp
  • ipcams/kw3715 ccd wired.wxp
  • ipcams/kw3716 ccd wireless.wxp
  • ipcams/kw3720 1 port video server.wxp
  • ipcams/kw3730 dual mode network camera.wxp
  • ipcams/lenovo 1001 ip camera.wxp
  • ipcams/levelone fcs-1010.wxp
  • ipcams/levo et-1001 ip camera.wxp
  • ipcams/lindy ip netcam.wxp
  • ipcams/link server cas 200.wxp
  • ipcams/link server cas 501.wxp
  • ipcams/linksys wvc200 (mjpeg mode).wxp
  • ipcams/mobotix network camera.wxp
  • ipcams/orite ip-cam.wxp
  • ipcams/orite pt-300.wxp
  • ipcams/panasonic bl-c10a (mjpeg mode).wxp
  • ipcams/panasonic bl-c10a.wxp
  • ipcams/panasonic ddn-cam1 (mjpeg mode).wxp
  • ipcams/panasonic ddn-cam1.wxp
  • ipcams/panasonic network camera (640x480).wxp
  • ipcams/panasonic network camera.wxp
  • ipcams/panasonic wv-np472 camera.wxp
  • ipcams/pixord video server.wxp
  • ipcams/soho internet camera.wxp
  • ipcams/sony network camera (mjpeg mode).wxp
  • ipcams/sony network camera with ptz.wxp
  • ipcams/sony network camera.wxp
  • ipcams/sony snc-m3.wxp
  • ipcams/sony snc-p5.wxp
  • ipcams/stardot netcam.wxp
  • ipcams/sweex ip network camera.wxp
  • ipcams/toshiba ik-wb02a.wxp
  • ipcams/toshiba ik-wb11a or ik-wb01a (firmware 2.0 or later).wxp
  • ipcams/toshiba ik-wb11a or ik-wb01a.wxp
  • ipcams/toshiba ik-wb21a.wxp
  • ipcams/toshiba ik-wr01a.wxp
  • ipcams/toshiba network camera.wxp
  • ipcams/trendnet tv-ip100 or tv-ip100w.wxp
  • ipcams/trendnet tv-ip200 or tv-ip200w.wxp
  • ipcams/trust surveillance samera.wxp
  • ipcams/vcenter nc 1000.wxp
  • ipcams/vivotek 3000 series.wxp
  • ipcams/vivotek video server.wxp
  • ipcams/wlan robotcam camera.wxp
  • ipcams/xannet xipcam-1001 ip camera.wxp
  • lang/chinese.xpl
  • lang/chinese_simplified.xpl
  • lang/croatian.xpl
  • lang/dutch.xpl
  • lang/english.xpl
  • lang/french.xpl
  • lang/german.xpl
  • lang/hungarian.xpl
  • lang/portuguese.xpl
  • lang/traditional chinese.xpl
  • lang/turkish.xpl
  • libgfl254.dll
    .dll windows:4 windows x86 arch:x86

    f97de29a0dde8bc9785b95a65d0a0529


    Headers

    Imports

    Exports

    Sections

  • libgfle254.dll
    .dll windows:4 windows x86 arch:x86

    2b5b724acc0491a5449a9118ee66be28


    Headers

    Imports

    Exports

    Sections

  • license.rtf
    .rtf
  • overlays/overlay_101.xml
  • overlays/simple date time.xml
  • readme.rtf
    .rtf
  • serial/SerialPort_Test.wxp
  • webcamXP.chm
    .chm
  • webcamXP.exe
    .exe windows:4 windows x86 arch:x86

    ae4ef5640d5e87c283fa9d1c4cb668ce


    Headers

    Imports

    Sections

  • webcamxp.swf
  • webcamxp_ppc.swf
  • webfiles/classes.jar
    .jar
  • webfiles/im_ptz_down.jpg
    .jpg
  • webfiles/im_ptz_left.jpg
    .jpg
  • webfiles/im_ptz_minus.jpg
    .jpg
  • webfiles/im_ptz_plus.jpg
    .jpg
  • webfiles/im_ptz_right.jpg
    .jpg
  • webfiles/im_ptz_up.jpg
    .jpg
  • webfiles/imu.gif
    .gif
  • webfiles/loading.jpg
    .jpg
  • webfiles/loading_80.jpg
    .jpg
  • webfiles/offline.jpg
    .jpg
  • webfiles/offline_80.jpg
    .jpg
  • webfiles/sound.jar
    .jar
  • webfiles/streaming.jar
    .jar
  • webfiles/webcamxp.swf
  • webfiles/webcamxp_ppc.swf
  • wxp-uninst.exe
    .exe windows:4 windows x86 arch:x86

    ec9fe2df073f9adb523d740ca14e7bb5


    Headers

    Imports

    Sections

  • wxp_translate.exe
    .exe windows:4 windows x86 arch:x86

    28d9b1d04d8a9cb59489f45313aaa23a


    Headers

    Imports

    Sections

  • wxp_translate.txt
  • 安装说明.url
    .url