General

  • Target

    391cd9a9fc17f6484ee54739dc5eab03_JaffaCakes118

  • Size

    3.8MB

  • MD5

    391cd9a9fc17f6484ee54739dc5eab03

  • SHA1

    39123b4eb669142b9668f77ce3e2ee0a01707e5c

  • SHA256

    40d4edbdb862bbf5f18b413a6b9ba6a9123dc0a1857fa15fb838ed2ec910154b

  • SHA512

    e2df8d124c4df831125562bd3fea68e407f04c1054bfe5325b9d36784d952d5f2faeb5be13a5a73a7dc2b9fafff62766b5fc99288fa25bfbe4a5376577976173

  • SSDEEP

    49152:0gvPmtp3yX4WbmBch4iiUQfMtzDwo18aC4az62TAI0a6PQIUa/13K+Dr6LfQuNZI:VW3cAQ45MVDBnCV6Avqaa/1a+R+H0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 391cd9a9fc17f6484ee54739dc5eab03_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstPath.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WelcomePage.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PROFILE/funshion.ini
  • $SYSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    d52e386cb07e1e13a6b9de526bbe1d78


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/aac_parser.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    59b98f265f7511c5286a6c9a4f36cddd


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/funshion.ini
  • $SYSDIR/rmsp.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    f25cc945c2d756198bd6c7a975e31619


    Headers

    Imports

    Exports

    Sections

  • $TEMP/blank.bmp
  • $TEMP/funshion.ini
  • $TEMP/getmacaddress.dll
    .dll windows:5 windows x86 arch:x86

    c32bcf78f4f0a2f4e84bcb8498a25c4c


    Headers

    Imports

    Exports

    Sections

  • $TEMP/installpathcn.bmp
  • $TEMP/installpathen.bmp
  • $TEMP/instpath.ini
  • $TEMP/welcomepage.ini
  • CrashReport.exe
    .exe windows:4 windows x86 arch:x86

    12a94abcb28defef504a47e3b83ef26c


    Code Sign

    Headers

    Imports

    Sections

  • Funshion.exe
    .exe windows:4 windows x86 arch:x86

    21970f36b9abdc89389b1d6ed77cdab2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GetMACAddress.dll
    .dll windows:5 windows x86 arch:x86

    c32bcf78f4f0a2f4e84bcb8498a25c4c


    Headers

    Imports

    Exports

    Sections

  • LangResEnAmerican.dll
    .dll windows:4 windows x86 arch:x86

    22b98c5c8c68a5c45b232e3b1c1c06e3


    Headers

    Imports

    Sections

  • PauseWebCloseBtn.bmp
  • RouterSetting.dll
    .dll windows:4 windows x86 arch:x86

    189c56c732ac9c83a731ef761eaf019b


    Headers

    Imports

    Exports

    Sections

  • WMVCORE.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    93ffa084929ccbb3d7c99014a7547237


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XPSP2Patch/FunshionInstall.exe
    .exe windows:4 windows x86 arch:x86

    c26551a8ec5b5d9de8297b0123f45a82


    Code Sign

    Headers

    Imports

    Sections

  • XPSP2Patch/InstallLangAm.dll
    .dll windows:4 windows x86 arch:x86

    22b98c5c8c68a5c45b232e3b1c1c06e3


    Headers

    Imports

    Sections

  • XPSP2Patch/bmps/3.bmp
  • XPSP2Patch/bmps/4.bmp
  • XPSP2Patch/bmps/5.bmp
  • XPSP2Patch/bmps/Dialog.bmp
  • XPSP2Patch/bmps/ch_fin.bmp
  • XPSP2Patch/bmps/ch_rcmd.bmp
  • XPSP2Patch/bmps/en_fin.bmp
  • XPSP2Patch/bmps/en_rcmd.bmp
  • XPSP2Patch/evid4226-vc80-mt.exe
    .exe windows:4 windows x86 arch:x86

    110b471245a9228f6f7e0ded8618f81d


    Code Sign

    Headers

    Imports

    Sections

  • cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • funshionplugin2.dll
    .dll windows:4 windows x86 arch:x86

    dac51e8b9eff82b627c3b7616e2735a5


    Headers

    Imports

    Exports

    Sections

  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • pndx5016.dll
  • pndx5032.dll
    .dll windows:4 windows x86 arch:x86

    3dff24d172f5031d837d000fcf3a81f8


    Headers

    Imports

    Exports

    Sections

  • quality.dll
    .dll windows:4 windows x86 arch:x86

    e4c9eb785b3f5559279841b7cc045a9d


    Headers

    Imports

    Exports

    Sections

  • rmoc3260.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    856609e709a6cabc2acd456e10aed0e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wmasf.dll
    .dll windows:5 windows x86 arch:x86

    f5ff989df3991d98134d8365e6abd655


    Headers

    Imports

    Exports

    Sections

  • xmllite.dll
    .dll windows:5 windows x86 arch:x86

    d6e6199223a8b2491473804dccbae6db


    Headers

    Imports

    Exports

    Sections