General

  • Target

    4498fbda45b463a960102f7d072ba02f_JaffaCakes118

  • Size

    5.5MB

  • MD5

    4498fbda45b463a960102f7d072ba02f

  • SHA1

    0ee0de58c027512b1900860f0a36de5e665e3354

  • SHA256

    d4d28309ee921a61536143bc1449b6444d8e8b668342a046a158d64b17ed20a9

  • SHA512

    03a6a089ebf515e78f63ca3873299ef349a3b839680a6371ce4e0f1a8da10911b04cf4e5c7eff9dfd3882cb590f25fda14bf1fc0732d1701d459240ae18d07ee

  • SSDEEP

    98304:IqAW5shRSKGnim2mDq9HpXGzF0YWeE6FF1OQQocSbAHXU64:p3sHiimtDq9Hp2yfCFrOxocSMHXf4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 41 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 4498fbda45b463a960102f7d072ba02f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/WebThunder_SetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    cb15c4ce4f27454ccf6f64d3e8a9ffaf


    Headers

    Imports

    Exports

    Sections

  • BugReport.exe
    .exe windows:4 windows x86 arch:x86

    4740164c3e34bd4b4976d13c9a3a65a8


    Headers

    Imports

    Sections

  • BugReport.ini
  • CacheServer.dll
    .dll windows:4 windows x86 arch:x86

    dba3be5b92dc3795e99ef29099085fdc


    Headers

    Imports

    Exports

    Sections

  • DownAndPlay/DapCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    947bbd0c8519506a531881d16af03f33


    Headers

    Imports

    Exports

    Sections

  • DownAndPlay/DapPlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b6c812eb3c2fb315aa07bf22ea9575f1


    Headers

    Imports

    Exports

    Sections

  • DownAndPlay/PlayerHelper.dll
    .dll windows:4 windows x86 arch:x86

    20a3347ed63625383c658c0ce1ceca6a


    Headers

    Imports

    Exports

    Sections

  • DownAndPlay/WebDownAndPlay.dll
    .dll windows:4 windows x86 arch:x86

    1123b0e3211d2ed95e75f54b2a2a4b0e


    Headers

    Imports

    Exports

    Sections

  • DownAndPlay/xlsf.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1b749b157df87ae05bd2f9c5d7a48614


    Headers

    Imports

    Exports

    Sections

  • Error.ini
  • FileIcon.dll
    .dll windows:4 windows x86 arch:x86

    b15f50e3f2711e0feb9b6d0b6f0258b5


    Headers

    Imports

    Sections

  • GetAllUrl.htm
    .html .vbs polyglot
  • GetUrl.htm
    .html .js polyglot
  • Packer.dll
    .dll windows:4 windows x86 arch:x86

    66a925fd48fd95340dda6602e57cc059


    Headers

    Imports

    Exports

    Sections

  • Profiles/Language.ini
  • Profiles/bootstrap.dat
  • Profiles/ipfilter.dat
  • Profiles/nodes.dat
  • Profiles/server.met
  • RegisterDll.dll
    .dll windows:4 windows x86 arch:x86

    b1df2dbe09b343d110fc7a0d35e46d7d


    Headers

    Imports

    Exports

    Sections

  • TaskManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a772fb9452e659ea3d53e1a41a17f0ff


    Headers

    Imports

    Exports

    Sections

  • ThunderLoader/IThunderDownload.xpt
  • ThunderLoader/NsThunderLoader.dll
    .dll windows:4 windows x86 arch:x86

    5e179d164188f94230b8f3641c5ebf2d


    Headers

    Imports

    Exports

    Sections

  • ThunderLoader/NsThunderLoaderInstaller.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    010d328133240c24863d78e97a8b2589


    Headers

    Imports

    Exports

    Sections

  • ThunderLoader/regxpcom.exe
    .exe windows:4 windows x86 arch:x86

    8a5fa7e9e22145cbaf8580dbd2f15762


    Headers

    Imports

    Sections

  • Thunder_cfg.ini
  • UpdateHistory.exe
    .exe windows:4 windows x86 arch:x86

    729cace0e2b6d813e90833a85e3960bd


    Headers

    Imports

    Sections

  • WebThunder.exe
    .exe windows:4 windows x86 arch:x86

    10f4b941c46f340a45b70a6398e09b6b


    Code Sign

    Headers

    Imports

    Sections

  • WebThunderBHO.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b556dba34aa3938506709d03dc23c998


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WebThunderInstaller.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    aea8a5c14f44f629be514a821266a7a9


    Headers

    Imports

    Exports

    Sections

  • WebThunder_SetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    cb15c4ce4f27454ccf6f64d3e8a9ffaf


    Headers

    Imports

    Exports

    Sections

  • XLNet.dll
    .dll windows:4 windows x86 arch:x86

    4e96b197ce8b5dfcf3e0d7a86735d74b


    Headers

    Imports

    Exports

    Sections

  • XLSafe/RMFScan.dll
    .dll windows:4 windows x86 arch:x86

    3e0ce9a9e7a68903b3278ad495a907ea


    Headers

    Imports

    Exports

    Sections

  • XLSafe/SafeInfo.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1d2aa51bc4cc9cf9d9a66873e6ceeb60


    Headers

    Imports

    Exports

    Sections

  • XLStatistic/XLStatisticAddin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ca08127b136ae977b81558ef12ea2413


    Headers

    Imports

    Exports

    Sections

  • al.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    daebcebd13ee9e21b0b812d6762e2160


    Headers

    Imports

    Exports

    Sections

  • asyn_dns.dll
    .dll windows:4 windows x86 arch:x86

    957f94aaadefaa504af46b2c983e8589


    Headers

    Imports

    Exports

    Sections

  • bd.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e1d3896cc1e6067b9009fc8ed952048c


    Headers

    Imports

    Exports

    Sections

  • download-complete.wav
  • download_interface.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    31c44741119b6ddbf66c0dbc11c14bf6


    Headers

    Imports

    Exports

    Sections

  • historyinfo_manage.dll
    .dll windows:4 windows x86 arch:x86

    37b9227ca259e757c314074fdb75da51


    Headers

    Imports

    Exports

    Sections

  • kankan/IJL15.DLL
    .dll windows:4 windows x86 arch:x86

    43fd8fd13d2d05654de14de52b9d512d


    Headers

    Imports

    Exports

    Sections

  • kankan/PPlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    031a0c119ddd43458308d814dc71f167


    Headers

    Imports

    Exports

    Sections

  • kankan/XAFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    674830c68ee84b9a1ada4313fff60d42


    Headers

    Imports

    Exports

    Sections

  • kankan/XPlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b3b90a218d13b84e0fd3df04313a9916


    Headers

    Imports

    Exports

    Sections

  • kankan/Xdrm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1dfc8d2416f1e5ce9c8a6e5e2fa2cb61


    Headers

    Imports

    Exports

    Sections

  • kankan/XmvSource.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    162f6c88b9fe9655bdbb45b9362a0fba


    Headers

    Imports

    Exports

    Sections

  • kankan/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • page.wtp
  • patchversion.dat
  • stlport_vc646.dll
    .dll windows:4 windows x86 arch:x86

    b1603c3e1c5acc291efe3235cc214391


    Headers

    Imports

    Exports

    Sections

  • streammedialib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1f0c169ad8a328d97f6d3be26daccf2c


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • upnp.exe
    .exe windows:4 windows x86 arch:x86

    db3aaec65b2cf92bd344076287539133


    Headers

    Imports

    Sections

  • xldc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c93797393d782153dadff23cad7c9e12


    Headers

    Imports

    Exports

    Sections