General

  • Target

    60963f7dead2bd01aa313a8eadcf38bc_JaffaCakes118

  • Size

    693KB

  • MD5

    60963f7dead2bd01aa313a8eadcf38bc

  • SHA1

    dbca50d790dd2a13eb9ee41880dbb2e0f54b2b8f

  • SHA256

    d1c9d57645dfc986cd839bfac2e41196d1f5a6bd96dca12160c5f0e021acf4fc

  • SHA512

    cc9e63e207e4fff61c4a1da69d7f191ac7e9b64394d2e33e66d10166cc5d2c065dd426b2e873121e7c3b68113833ac4b678a2f105f422479253f520dd09da9ec

  • SSDEEP

    12288:nWP0ksnIXuJ+QNxnt8NI4eCV59LiKGhpR9SgPsnG1HbQxSLB:nWPcn+uJ+Au+6VjhGh0gP3CSV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 60963f7dead2bd01aa313a8eadcf38bc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    80686d0ea5c37412830430f56f2823c2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ServiceBlock.dll
    .dll windows:4 windows x86 arch:x86

    9ddcd4becdc8a819fcb11c1bcd3728e2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • C:/WINDOWS/system32/drivers/showpop.sys
    .sys windows:4 windows x86 arch:x86

    33f09c056996bc1d7768df106a23813c


    Headers

    Imports

    Sections

  • C:/WINDOWS/system32/drivers/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ServiceBlock.dll
    .dll windows:4 windows x86 arch:x86

    9ddcd4becdc8a819fcb11c1bcd3728e2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
  • ShowLib.dll
    .dll windows:4 windows x86 arch:x86

    0e29ed10c8b59fd12d569b8999df8309


    Headers

    Imports

    Exports

    Sections

  • ShowLib.dll.intermediate.manifest
    .xml
  • YoushowPopup.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8029bb96cd867b64bf465193ff6c507b


    Headers

    Imports

    Exports

    Sections

  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • showpop.sys
    .sys windows:4 windows x86 arch:x86

    33f09c056996bc1d7768df106a23813c


    Headers

    Imports

    Sections

  • youshowpopup.exe
    .exe windows:4 windows x86 arch:x86

    6c01f6232a0d6af4f21e4be4feb90077


    Headers

    Imports

    Sections

  • youshowpopup.exe.intermediate.manifest
    .xml