General

  • Target

    1013e620bb84860f6faed14849f667e4_JaffaCakes118

  • Size

    9.7MB

  • MD5

    1013e620bb84860f6faed14849f667e4

  • SHA1

    7cf7463fb53be8b1d7137c7d50fbd60144257646

  • SHA256

    2e1b4d27ce064220a6c96844856a77ebbdf4bbaecc8f7f2fbc742dcff7bc65d4

  • SHA512

    8b4c456b920c54706f215be0db062dbd35bf6a65be1a0768ff10b51b64b94a5950bef5228d5790a6ef3764783e7fd9b12387103ee10021bbce5469dc65f17474

  • SSDEEP

    196608:7YWYxuDdCbgN3doEEl4clDTbdasXW25WjOzLAOgZECqjWUfKLnWiwraR:sNodCbgReEEVDaGW2ojOzeujWtLnWiS+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 1013e620bb84860f6faed14849f667e4_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.2.0.0.0.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a51dab6f4a70c7f5108331c3fee35df0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    37c57c99267b241d11cb1f6f96b0ba5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Gallop.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1da29e82f34c4c28065ee790cd4ea137


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/HTTP_ASF_SOURCE.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/Hookkernel.dll
    .dll windows:5 windows x86 arch:x86

    39a0c6105a00746b436b64ffd0d840f1


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/IEBrowser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2d04a28fb8bc9bcf9582f5434202f016


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0755733d26fed94404938303a618da1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KADEMLIA.DLL
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    109c032cfbd301a5463d71c5477714b2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    3ec1562ecdfd7b5d4e954855b4d24533


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MP4Splitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    6a413d2443eac83c2997189f40595191


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    828641f1105cc2848d34b35b9507973b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NCList.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    5c7439cd337375341e58f37b3b87c3fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OPlayer.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    4cc8151edb5776110d27e896bf48ff0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    a7c2770340db65b3dcb79c29aa100aca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPChLocalManager.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a143a9c174435ee0d778befd1926c283


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPFlvCom.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    47f0ca50417393684d5fc0891a7d219e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPFrame.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    5ca598315df60a395d027565e8bcccf9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPHookShell.dll
    .dll windows:5 windows x86 arch:x86

    89f107d056c4c082a3da5d76aa15ed89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPLive.exe
    .exe windows:4 windows x86 arch:x86

    a7c2770340db65b3dcb79c29aa100aca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPLiveU.exe
    .exe windows:4 windows x86 arch:x86

    a7c2770340db65b3dcb79c29aa100aca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPOptions.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8c0ceebb1f7de273fa2ed826d10c773b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPP.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f4c85e77e6df0d66743142860ece180


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPUrlList.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e87b8851851185a75c0c130f3741b53


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProductUpdate.dll
    .dll windows:5 windows x86 arch:x86

    04679d5f7bb4b6b0caa773423223453c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Send_Log_Kernel_Module.dll
    .dll windows:4 windows x86 arch:x86

    43e12366080d2670a77e2262b7a2a482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TipsClient.dll
    .dll windows:4 windows x86 arch:x86

    301f2e86b305b31b8b19e00f1ccf671f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Troubleshooter.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    369c58afa74e4afa65000b47855377fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VAProxyD.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8259f34dbf43c7d2cc90e3b070899d20


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    84d3fae859555f3fa806d87efe60a956


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/audioswitcher.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    44d6c239fec5f9a713dd7e36b1afeee9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/chctrl.dll
    .dll windows:4 windows x86 arch:x86

    7d57e06d951818b05cc15c555b5d72d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/cmdline.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bf507c366793e28d35042a2d6a83fef3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/condisp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    856f9ac2b9a387c9282961c398c7f48d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    ecf049fd1e443d20553200f13e1deea6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/filepick.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e890af00f244792627375196635a5b59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ikan-p.ico
  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5791e6948e5cceb9a71dd3ba2a578784


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    1bb9ac75bcddcad19ef884bc3d73f3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/omng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f013fe0fbaed8e51b52e2b192147e148


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/peer.dll
    .dll windows:4 windows x86 arch:x86

    59bb48a02cfe57e8ecbb5a95e967786e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c2b443f417acb644ff71c57b5c9acca5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    46929088280429ac3354990b94720261


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sop.dll
    .dll windows:5 windows x86 arch:x86

    9b2ec207641fa564463cd5a4c15c2d64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    ae203af973724c4f20d47874300ff971


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tpi.dll
    .dll windows:4 windows x86 arch:x86

    90547e4eb5ec31263ac362ca3152bc21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ui.dll
    .dll windows:5 windows x86 arch:x86

    6956d90580f9fac6800f0664e75f4910


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bb10897f8fddf903bc20e7a934352e9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ETADPU.DAT
  • IP
  • NOISREV.DAT
  • PPTVLicense.txt
  • TestChannel.txt
  • What's new.txt
  • icons/ikan-p.ico
  • ipcfg.ini