General

  • Target

    45666ec04ff635cd73f84566b2a8a1e9_JaffaCakes118

  • Size

    15.6MB

  • MD5

    45666ec04ff635cd73f84566b2a8a1e9

  • SHA1

    3aa129c4b687fa6a844dcd8b4c4cad4ea6edae69

  • SHA256

    3a97691a5f22b503987b858c13c6b2b03b1908365dacd75605b8b72caaa8f30d

  • SHA512

    ddaf463abd2abb7763f55b582a6cdf290e8c128ec7e80bd9a57aa96d94f078d7beca141359f9ad1e51d1316f1a42a12bb951b439ac4d06a15b213ad81917e742

  • SSDEEP

    393216:xUvzAGJ3dMf7q2ObdBEWg7dJnZiNUBNuUQhla1RSxZ57Z8:xUvRcq2ObQJnAv5757Z8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 45666ec04ff635cd73f84566b2a8a1e9_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.2.0.0.0.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a51dab6f4a70c7f5108331c3fee35df0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    37c57c99267b241d11cb1f6f96b0ba5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GetCommentsInfoDll.dll
    .dll windows:4 windows x86 arch:x86

    1e2dbd1840e910287de8240532354090


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/HTTP_ASF_SOURCE.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/Hookkernel.dll
    .dll windows:4 windows x86 arch:x86

    9db40d556cd2d852ea51672f0ff36a72


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    55e79df82a11a9c3b96f7ebb44d55181


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    109c032cfbd301a5463d71c5477714b2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    3ec1562ecdfd7b5d4e954855b4d24533


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Loader.exe
    .exe windows:4 windows x86 arch:x86

    6ad9a26a882076717c288c068cf84446


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/MP4Splitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    6a413d2443eac83c2997189f40595191


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    729a3b03d2daecf1680b926f23373618


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OPlayer.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    256ffd0333d26fb8086db9b1e070ff45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    8b09590074c9596dc529d255269e0815


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPBindDAC.dll
    .dll windows:4 windows x86 arch:x86

    087c746d736fa3dada6a6d2512421d64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPHookShell.dll
    .dll windows:4 windows x86 arch:x86

    f61b7d78068048549d605134de104dc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPLive.exe
    .exe windows:4 windows x86 arch:x86

    8b09590074c9596dc529d255269e0815


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPLiveU.exe
    .exe windows:4 windows x86 arch:x86

    8b09590074c9596dc529d255269e0815


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPP.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    55fd5ab38873ca9fa66978b13d11b1e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProductUpdate.dll
    .dll windows:5 windows x86 arch:x86

    bb21f915ae0a8fbe563c7ae3045d992e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Send_Log_Kernel_Module.dll
    .dll windows:4 windows x86 arch:x86

    43e12366080d2670a77e2262b7a2a482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TipsClient.dll
    .dll windows:4 windows x86 arch:x86

    06ad09e6be2147029215bcc7830d3de7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Troubleshooter.dll
    .dll windows:4 windows x86 arch:x86

    20063ae6b5d23d052c68a2438bebedf8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VAProxyD.dll
    .dll windows:4 windows x86 arch:x86

    c3502aeb4d5cff18ed59ececfbd2c70f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    7a39dbc4d77ff28af77d6a29566084ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/audioswitcher.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    44d6c239fec5f9a713dd7e36b1afeee9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    4c58834f40af689f9a014f980c90715f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ifupt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a21e1cbbc518fb588ef6bf87936ca9ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ikan-p.ico
  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e7b5c64fa3c56bd4baa47127937cf832


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    1bb9ac75bcddcad19ef884bc3d73f3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/omng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f013fe0fbaed8e51b52e2b192147e148


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/peer.dll
    .dll windows:4 windows x86 arch:x86

    b4580bd22b5d6fa0c06b9125382a5f4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e15dea649cfaf1183f2f8e7ab4c8ef36


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    dc94b21b23329404879193948542d0b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sop.dll
    .dll windows:4 windows x86 arch:x86

    3ac0228f8485c02fa87ba23d1e047981


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    ae203af973724c4f20d47874300ff971


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tpi.dll
    .dll windows:4 windows x86 arch:x86

    90547e4eb5ec31263ac362ca3152bc21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ui.dll
    .dll windows:5 windows x86 arch:x86

    84bb4d734415489706dd361b24c23fe8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b21dc5aac1fb39dced130358580e621


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icons/ikan-p.ico