General

  • Target

    3242f51c22a960efb3a90fa81dcd1505_JaffaCakes118

  • Size

    2.0MB

  • MD5

    3242f51c22a960efb3a90fa81dcd1505

  • SHA1

    a1bb615117512f4fadc9e962f03678ac1e96cc30

  • SHA256

    d185fd7807fd4b518ce6789d5744b745d04b8e42e0f889fb78ca98cee06a1fcc

  • SHA512

    1b0752cb1f9e7e04d80ca2a5b3be70af05b9b320f8c51b847bbc263440cf0a07cb89c79b729c7c9b2b49153bc975d95acc1d87ef40832e5f4cc514a473874461

  • SSDEEP

    49152:JVj4hhs68xmX31QnurwU++Axn8p18vXJD6bPPpXgbkY:JVjCpX3On8wR98T8vJD6jBXU

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 3 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3242f51c22a960efb3a90fa81dcd1505_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DrVirusClearDll.dll
    .dll windows:4 windows x86 arch:x86

    f1c9d652b942a17502c9395b1dedc3b2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AutoUpdate.exe
    .exe windows:4 windows x86 arch:x86

    10ad2e5c42d967302eaaff51cd49c240


    Headers

    Imports

    Sections

  • DrVirus.dad
  • DrVirus.dal
  • DrVirus.dat
  • DrVirus.dll
    .dll windows:4 windows x86 arch:x86

    87167cf781299fd6d3b522106f964a2f


    Headers

    Imports

    Exports

    Sections

  • DrVirus.exe
    .exe windows:4 windows x86 arch:x86

    dc4b3d30d4ff165b5e9967354d936e3c


    Headers

    Imports

    Sections

  • NKShellAPI.dll
    .dll windows:4 windows x86 arch:x86

    4d8f33df1fa8888c9cb556510af12b9a


    Headers

    Imports

    Exports

    Sections

  • NoADE.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • NoADS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • NoADU.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • RemoveDV.exe
    .exe windows:4 windows x86 arch:x86

    dbfe79894242ca162968c714b4366f9b


    Headers

    Imports

    Sections

  • SpOrder.dll
    .dll windows:5 windows x86 arch:x86

    23558a0188ea46c6167cc7ac61b3c7f8


    Headers

    Imports

    Exports

    Sections

  • UpdateList.txt
  • WebInsDV.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    360f9787874a841ecf086b2adaa841f5


    Headers

    Imports

    Exports

    Sections

  • libmySQL.dll
    .dll windows:4 windows x86 arch:x86

    859e8ea417e22c32a69862022d7dfb3d


    Headers

    Imports

    Exports

    Sections

  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • noad.cdv
  • partner.ini
  • removal.log
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ǰ༭.txt