General

  • Target

    35e10c53232112b1193880e5b3ef36bc_JaffaCakes118

  • Size

    25.5MB

  • MD5

    35e10c53232112b1193880e5b3ef36bc

  • SHA1

    d31c06051210c825c394da2842031b845f94f609

  • SHA256

    c37ac379f7614de0382c60dee8470067c15397a0679cff1f6e4b7f6b40f029b6

  • SHA512

    864e3dfb840b3ea9ff3c0478d97da3b7e98b587fdc75252d561f009b0e121491855624b7e46de736dba8f1ac02c56cf610d84d614f83407557a4b71538a54319

  • SSDEEP

    393216:gg+IWYDv9FYF3+x/h/13Bs+VYVY03ssoV+/Z/Zs+dEJxiTP/bciziKTDxb/rKXIE:H+7F3M/9Njf2tdEmUizB/rKYSoorz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • 35e10c53232112b1193880e5b3ef36bc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $(LSTR_76).exe
    .exe windows:5 windows x86 arch:x86

    ea3c1692e1d3e9bbcc595e0cc838ebcc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Dialer.dll
    .dll windows:4 windows x86 arch:x86

    77d42551d0d092e7c42961ca47bb7a69


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FinishWelcome.bmp
  • $PLUGINSDIR/INetC.dll
    .dll windows:6 windows x86 arch:x86

    11cd6df8cede073a0e00bd840833dd26


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellLink.dll
    .dll windows:5 windows x86 arch:x86

    45fa690faed482cb9bfd08458ed442ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ad.html
    .html
  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    4d85954a016da6eba41af38db29369a8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/default_banner.png
    .png
  • $PLUGINSDIR/finish_ad_image.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:6 windows x86 arch:x86

    146872104f86c0bc478b21272e26f97d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/warning.bmp
  • $PLUGINSDIR/welcome.bmp
  • $TEMP/DefaultGrLauncher.ini
  • $TEMP/NSISPromotionEx.dll
    .dll windows:6 windows x86 arch:x86

    ea0c3fb0265ea2abdbcb83e9cdcfb58a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/NSISTrigger.dll
    .dll windows:6 windows x86 arch:x86

    bde97cb6ac951f3933fc1345619c66c3


    Headers

    Imports

    Exports

    Sections

  • $TEMP/spltmp.bmp
  • CrashDumpCollector.dll
    .dll windows:5 windows x86 arch:x86

    afb526ce09522466b9fc0c0e18cd4d4b


    Headers

    Imports

    Exports

    Sections

  • GOMProtect.exe
    .exe windows:5 windows x86 arch:x86

    4f383ca6825fbbb664925b2ff23a06f7


    Code Sign

    Headers

    Imports

    Sections

  • GomVR.dll
    .dll windows:5 windows x86 arch:x86

    7d1e8f25335c8023d386f1b3109453b0


    Headers

    Imports

    Exports

    Sections

  • GrLauncher.exe
    .exe windows:5 windows x86 arch:x86

    a1b0efe4285ccc903f9feab6fc740ad7


    Code Sign

    Headers

    Imports

    Sections

  • KillGom.exe
    .exe windows:5 windows x86 arch:x86

    175f226801ef0f6baab6950f64df40db


    Code Sign

    Headers

    Imports

    Sections

  • gdiplus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Headers

    Imports

    Exports

    Sections

  • libass.dll
    .dll windows:5 windows x86 arch:x86

    2c164b90c1b5a24e0c9e2ce914e96c0f


    Headers

    Imports

    Exports

    Sections

  • modules/D3DX9_43.dll
    .dll windows:6 windows x86 arch:x86

    5fb75b2a87c1fa7cc3d7904a0b97084a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • modules/Dodge.dll
    .exe windows:5 windows x86 arch:x86

    0d95bcc30ad5b3d7180b939d7b6bf41e


    Code Sign

    Headers

    Imports

    Sections

  • modules/GAF.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a65d70e8c6b2f1a5d7f10ffe6fa1037f


    Headers

    Imports

    Exports

    Sections

  • modules/GNF.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a424682c48ab66740ff2503de279776e


    Headers

    Imports

    Exports

    Sections

  • modules/GRFU.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    5b521243f2b14c2fe822accdd80cc64f


    Headers

    Imports

    Exports

    Sections

  • modules/GSFU.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    1a90cde78b7ec35178a5ca7231c67ad0


    Headers

    Imports

    Exports

    Sections

  • modules/GVF.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    8c450f36d48576e9dd573d0f75c41ef9


    Headers

    Imports

    Exports

    Sections

  • modules/GVRF.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    1bc90928061d952c3757671b29a69b15


    Headers

    Imports

    Exports

    Sections

  • modules/GifMaker.dll
    .dll windows:5 windows x86 arch:x86

    0b693cea2508b3ae22ac25d547c7d319


    Headers

    Imports

    Exports

    Sections

  • modules/MediaInfo.dll
    .dll windows:5 windows x86 arch:x86

    3f6c4f8ba75bc283280093e4b991433f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • modules/MediaSource.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    b13f04744370e03b0f3a3c29f433336b


    Headers

    Imports

    Exports

    Sections

  • modules/Subtitle.dll
    .dll windows:5 windows x86 arch:x86

    93d7ccbcee92f4be90a64dc88bf03346


    Headers

    Imports

    Exports

    Sections

  • modules/SubtitleFilter.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a3d7b16e4d8004b64ed893f1c02d55c3


    Headers

    Imports

    Exports

    Sections

  • modules/avcodec-gp-57.dll
    .dll windows:4 windows x86 arch:x86

    853415ca3c3d276376dc87def6a7cde9


    Headers

    Imports

    Exports

    Sections

  • modules/avfilter-gp-6.dll
    .dll windows:4 windows x86 arch:x86

    b45d5e6c0ae002b63c4841d568114dcc


    Headers

    Imports

    Exports

    Sections

  • modules/avformat-gp-57.dll
    .dll windows:4 windows x86 arch:x86

    e3db25f9e81fd8f77371d21d8962d6f6


    Headers

    Imports

    Exports

    Sections

  • modules/avutil-gp-55.dll
    .dll windows:4 windows x86 arch:x86

    2f54c411f91fed8fdad2da41ce9f6371


    Headers

    Imports

    Exports

    Sections

  • modules/d3dcompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • modules/libmp3lame.dll
    .dll windows:6 windows x86 arch:x86

    b18b8ea67ad814366ff698b4bcce051e


    Headers

    Imports

    Exports

    Sections

  • modules/openvr_api.dll
    .dll windows:5 windows x86 arch:x86

    29ab18869a8982f2290c2075e0ec121d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • modules/qscl.dll
    .dll windows:4 windows x86 arch:x86

    ecb2bd0ba466152906c84a569890da38


    Headers

    Imports

    Exports

    Sections

  • modules/swresample-gp-2.dll
    .dll windows:4 windows x86 arch:x86

    969da1b1d08618b0150477bffdd21ce2


    Headers

    Imports

    Exports

    Sections

  • modules/swscale-gp-4.dll
    .dll windows:4 windows x86 arch:x86

    82f657799fc6daf74e692329b87f9907


    Headers

    Imports

    Exports

    Sections

  • modules/tbb.dll
    .dll windows:5 windows x86 arch:x86

    820a6527e9e9983cd5eb03c107a7ed6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • popup.exe
    .exe windows:5 windows x86 arch:x86

    8fa76cd4b689eade95f519aa445340eb


    Code Sign

    Headers

    Imports

    Sections

  • setting.ini