General

  • Target

    0e5f1f4483848384f1406b0c77517546_JaffaCakes118

  • Size

    839KB

  • MD5

    0e5f1f4483848384f1406b0c77517546

  • SHA1

    dfbf162196d8d80b5901fcc7c3f28bf0185b225c

  • SHA256

    d3b8570127cc320f9bf85cc44dac5d9f17a276f6a02f0dd9c0847602d61d3c31

  • SHA512

    edf884e0d38636c007ac9c8416737925e1ffe3926327e5c28edfb4e4b50a2bac26ad886cf9c7b4de5be3eeead7b6d43a4f7c401710397332d04f5e2c004d3e13

  • SSDEEP

    24576:WANooZZbRthLqxWWM/C/hUXPER2vPQXCT631W5A:WM5ZBdLkWKUXPEQIn3CA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 0e5f1f4483848384f1406b0c77517546_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    fd5ce232e6703cc4ebbce551ac4fd8cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetService.dll
    .dll windows:4 windows x86 arch:x86

    7936d68cc61ccbbcbf6a614e8b942b32


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/Microsoft.VC80.CRT.manifest
  • $SYSDIR/NMlivetor.exe
    .exe windows:4 windows x86 arch:x86

    a96ef4082c329abf84c66e02ad22144f


    Headers

    Imports

    Sections

  • $SYSDIR/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT.manifest
  • NMlocal.exe
    .exe windows:4 windows x86 arch:x86

    59e1f7c0b3c65ead2a6bb3ff9a210f4e


    Headers

    Imports

    Sections

  • default.txt
  • default_cell.txt
  • livevisualguide.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b0670911d76d4f96721983a3046b600a


    Headers

    Imports

    Exports

    Sections

  • livevisualguide.dll.intermediate.manifest
    .xml
  • livevisualguidemodule.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ca03b99d58525bc2f084e3e03ce2e4b9


    Headers

    Imports

    Exports

    Sections

  • livevisualguidemodule.dll.intermediate.manifest
    .xml
  • livevisualguideupdate.exe
    .exe windows:4 windows x86 arch:x86

    3d264a2573aa4f3021bd6000686d56a3


    Headers

    Imports

    Sections

  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • nmvhook.dll
    .dll windows:4 windows x86 arch:x86

    430313bba29a20cbced9e9cde83ed4e4


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp