General

  • Target

    5b6dcf139d3347a9f1afb3ccc8b8a960_JaffaCakes118

  • Size

    1.2MB

  • MD5

    5b6dcf139d3347a9f1afb3ccc8b8a960

  • SHA1

    cd6da58e6fa23862e7114a66543e018220a6192b

  • SHA256

    c364a950c8d9363248a2ebcb7c45e78ac8ff86421888d4182c38c86ab8780b98

  • SHA512

    36b51d569bb46e3c580842c29da0e2ad4a5c9b9f04af2484c84c16db8efd3cdb54cf425a0e35a09ae4c47a3e6abba0fcd6acfac4ca2856ac2e6db1dca55e01b5

  • SSDEEP

    24576:fwRwEtJzUMENvRtwpIkMkM6c9PioUpe8KtAXeoSEZv+GkETWlQNtXFXA7ufRJw/:fHEtyNt4QYWJB88AuoV2GkETWlCtXFX8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5b6dcf139d3347a9f1afb3ccc8b8a960_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BundleINI.dll
    .dll windows:4 windows x86 arch:x86

    d08fe60c3a17f3005f548792dee65fc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLDownLoader.dll
    .dll windows:4 windows x86 arch:x86

    2be5c75b54508e5f9ce230cd7d1c100a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExAddPage.dll
    .dll windows:4 windows x86 arch:x86

    a31423df96accd7f6a5fcbbc3f31973a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FILEDownPlug.dll
    .dll windows:4 windows x86 arch:x86

    6de7e665949d01730498664eca6dc12b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IsVista.dll
    .dll windows:4 windows x86 arch:x86

    efa700f367af492674a29b601d27bd91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ischeck.dll
    .dll windows:4 windows x86 arch:x86

    251a9619bbd921d60321154c493fcc9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LiveChk.dll
    .dll windows:4 windows x86 arch:x86

    61d7250d1f0e49e7d8f5ab4e906c3bf3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StringFind.dll
    .dll windows:4 windows x86 arch:x86

    c12cd4433bc58306b1700debf2b4c251


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserMgr.dll
    .dll windows:4 windows x86 arch:x86

    bac2b3d4a0df9a23aee940b8ecd0d168


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ancamcorder_lincese_1.5.txt
  • $PLUGINSDIR/installoption.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stack.dll
    .dll windows:4 windows x86 arch:x86

    55ae76a2cfe164921f566c03cfbba5ec


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ancamcoder.xml
    .xml
  • ancamcorder.exe
    .exe windows:4 windows x86 arch:x86

    28bd8a5bd46118c4d1fcc85eff234055


    Headers

    Imports

    Exports

    Sections

  • ancamcorderupdate.exe
    .exe windows:4 windows x86 arch:x86

    5b069f7a1f6ba9e8f1decaca5c5ba305


    Headers

    Imports

    Sections

  • xvid/driver/Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • xvid/driver/install.bat
  • xvid/driver/xvid.inf
  • xvid/driver/xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    056097a1b0cb00b2dfa4e81b830e30bc


    Headers

    Imports

    Exports

    Sections

  • xvid/driver/xvidvfw.dll
    .dll windows:5 windows x86 arch:x86

    c5cb7741b3fc29c20102a88de7ac926b


    Headers

    Imports

    Exports

    Sections