General

  • Target

    44b88327bfc7e9b4c63cabd484262cfc_JaffaCakes118

  • Size

    5.7MB

  • MD5

    44b88327bfc7e9b4c63cabd484262cfc

  • SHA1

    0e59e56b09347219274c1c816b64e7b2402b2c35

  • SHA256

    20494baec20be548e36dce63f76f05ddbcd486a71633248b95ebb8532df2330b

  • SHA512

    2a6e2705daba77204eac827f8a8c338a29f836ac92a7f3f59d90241e69910044a71002b07f9fce7e118eb888c582aefe1b8f41fb7e2741e426ef59b301885376

  • SSDEEP

    98304:9qZiN/9pr0qhy7ZDrtWyd6zGNOS9f21RCrcvxXOgWEDzUPMZMHxE2QKve7iPt0x5:9XNbr0qY7ZD8yAzGNOSFQOIRbZMHa+vy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 40 IoCs

    Checks for missing Authenticode signature.

Files

  • 44b88327bfc7e9b4c63cabd484262cfc_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/MSVCP71.DLL
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/MSVCR71.DLL
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Low/xmp/FileAss
  • $TEMP/XmpSetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    b1bd8c660e015cb1f71ad54d66c4e3ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/dl_peer_id.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d3758c594888fd981d5b78ad288a0a5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • APlayer/APlayerSetup.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Codecs/apsf.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    698f5d38e8245d2ec7062bb2645acefb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Codecs/coreavc.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a51dab6f4a70c7f5108331c3fee35df0


    Headers

    Imports

    Exports

    Sections

  • Codecs/mp4splitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    960d88695d7d51ac6af69795dbbbccd6


    Headers

    Imports

    Exports

    Sections

  • Codecs/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • Codecs/qasf.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    bbb14fadad3756876b912cbbdfae91de


    Headers

    Imports

    Exports

    Sections

  • Codecs/realmediasplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    d5e155b2fe6bb33e42e3df2c58126a43


    Headers

    Imports

    Exports

    Sections

  • Codecs/wmfdemux.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    50cd95eadb56f05691eb384ff68320a0


    Headers

    Imports

    Exports

    Sections

  • FixCodecs.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $R1/$COMMONFILES/Real/Codecs/cook3260.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • $R1/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • $R1/colorcvt.dll
    .dll windows:4 windows x86 arch:x86

    eab9bfd5871f3864184b197967c68ad1


    Headers

    Imports

    Exports

    Sections

  • $R1/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • $R1/drv1.dll
    .dll windows:4 windows x86 arch:x86

    232d11e71e9db2c13e39696149eba4f6


    Headers

    Imports

    Exports

    Sections

  • $R1/drv2.dll
    .dll windows:4 windows x86 arch:x86

    44586b56c5dcc55b19268bed59258786


    Headers

    Imports

    Exports

    Sections

  • $R1/drvc.dll
    .dll windows:4 windows x86 arch:x86

    10ae9848d04978553ee06cd3369d224f


    Headers

    Imports

    Exports

    Sections

  • $R1/raac.dll
    .dll windows:4 windows x86 arch:x86

    21e5d5614dd85ab5a215c0f5530bca84


    Headers

    Imports

    Exports

    Sections

  • $R1/rv10.dll
    .dll windows:4 windows x86 arch:x86

    7d0bbca4dd169c4c1a33b2513aa5069d


    Headers

    Imports

    Exports

    Sections

  • $R1/rv20.dll
    .dll windows:4 windows x86 arch:x86

    de93a6d25a8e8a4317757a0f9e71593a


    Headers

    Imports

    Exports

    Sections

  • $R1/rv30.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • $R1/rv40.dll
    .dll windows:4 windows x86 arch:x86

    eef3793aeff0d4aa1df3ef9fa84056e4


    Headers

    Imports

    Exports

    Sections

  • $R1/sipr.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/colorcvt.dll
    .dll windows:4 windows x86 arch:x86

    eab9bfd5871f3864184b197967c68ad1


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/drv1.dll
    .dll windows:4 windows x86 arch:x86

    232d11e71e9db2c13e39696149eba4f6


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/drv2.dll
    .dll windows:4 windows x86 arch:x86

    44586b56c5dcc55b19268bed59258786


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/drvc.dll
    .dll windows:4 windows x86 arch:x86

    10ae9848d04978553ee06cd3369d224f


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/raac.dll
    .dll windows:4 windows x86 arch:x86

    21e5d5614dd85ab5a215c0f5530bca84


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/rv10.dll
    .dll windows:4 windows x86 arch:x86

    7d0bbca4dd169c4c1a33b2513aa5069d


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/rv20.dll
    .dll windows:4 windows x86 arch:x86

    de93a6d25a8e8a4317757a0f9e71593a


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/rv30.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/rv40.dll
    .dll windows:4 windows x86 arch:x86

    eef3793aeff0d4aa1df3ef9fa84056e4


    Headers

    Imports

    Exports

    Sections

  • Codecs/Real/Codecs/sipr.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • Temp/APlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    aac9e37b50661f051b09ebf31bcef70c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Temp/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • Temp/filters.ini
  • Temp/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Temp/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe.nsis
  • DapCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a6221d8866d2cd5ac189efc1a363c8db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVCP71.DLL
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVCR71.DLL
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • StreamI.cfg
    .dll windows:4 windows x86 arch:x86

    b15f50e3f2711e0feb9b6d0b6f0258b5


    Headers

    Imports

    Exports

    Sections

  • StreamI.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ee0277c19cc3c7ca3cde8778b5c00926


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TSF.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5974f11932911abc355aa95ee8324ad5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ThunderFW.exe
    .exe windows:5 windows x86 arch:x86

    7717b5d034e4ed74403172187d115c63


    Code Sign

    Headers

    Imports

    Sections

  • UACTool.dll
    .dll windows:4 windows x86 arch:x86

    80602813e88379342331b281ba0235f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XLBugHandler.dll
    .dll windows:4 windows x86 arch:x86

    4ea7fb5164665f4db9d8b54362b77bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XLBugReport.exe
    .exe windows:4 windows x86 arch:x86

    3f8bfe0657929f219c8c757b5dd2f70d


    Code Sign

    Headers

    Imports

    Sections

  • XLCrypto.dll
    .dll windows:4 windows x86 arch:x86

    4a01333d1673a520341f5d0fb358b573


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XMPBoot.exe
    .exe windows:4 windows x86 arch:x86

    6bd2d814b03a7c804b3023bc3983ad24


    Code Sign

    Headers

    Imports

    Sections

  • atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dl_peer_id.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d3758c594888fd981d5b78ad288a0a5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vd.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cdb1f1a62f6528599a16ce479d845e43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xmpboot.cfg