General

  • Target

    63cab811e7dfca02022a44df76954e74_JaffaCakes118

  • Size

    3.7MB

  • MD5

    63cab811e7dfca02022a44df76954e74

  • SHA1

    6d2740595a31c0fe6ebcde407bc988ddce7bce39

  • SHA256

    e4b18e7ebceb423a8ecb20e03094e145b29c489e3cb448a0eef489356a4d4869

  • SHA512

    24265225d5ad99c76946344a02e611e9d30c386af5c799a92b917de0c159765e888c3c11f67a220406fe76bcabca40116469bc43119b86cc4b44005d5da99f20

  • SSDEEP

    98304:4u0HuT9jmD385lHDWVOKRgDgW7VhqSzVVWACNuPB:4dY9K8f6YKRgD9hqSzKAyu5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 63cab811e7dfca02022a44df76954e74_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcirt.dll
    .dll windows:5 windows x86 arch:x86

    c9e4d1c3c611270cb8fe488259e71c2a


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • GVOD/APlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2f84ead6957e84cc2a94c2fcdeb6979a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/BugReport.exe
    .exe windows:4 windows x86 arch:x86

    1eed6201397626f8ffae2168ae4c590f


    Code Sign

    Headers

    Imports

    Sections

  • GVOD/BugReportU.dll
    .dll windows:4 windows x86 arch:x86

    31243ad76b45b1e9069fc1162bae830e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/drv1.dll
    .dll windows:4 windows x86 arch:x86

    232d11e71e9db2c13e39696149eba4f6


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/drv2.dll
    .dll windows:4 windows x86 arch:x86

    44586b56c5dcc55b19268bed59258786


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/rv10.dll
    .dll windows:4 windows x86 arch:x86

    7d0bbca4dd169c4c1a33b2513aa5069d


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/rv20.dll
    .dll windows:4 windows x86 arch:x86

    de93a6d25a8e8a4317757a0f9e71593a


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/rv30.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/rv40.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/Real/Codecs/sipr.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • GVOD/Codecs/RealMediaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    37e0e722dd972fdfc168bbe2168b91d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/DSConfig.bin
  • GVOD/DapCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0018da3bad6e8102619750e91c9765d4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/GVOD.ico
  • GVOD/GVOD.xml
  • GVOD/GVODPlayer.dll
    .dll .js regsvr32 windows:4 windows x86 arch:x86 polyglot

    16c48298d875253f2afb5e325fff2015


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/GVODS.exe
    .exe windows:4 windows x86 arch:x86

    83b664b0d88e8ffeb382d2c3c530c632


    Code Sign

    Headers

    Imports

    Sections

  • GVOD/ThunderLiveUD.exe
    .exe windows:4 windows x86 arch:x86

    95fa3bd229040e7dc51c5e8f6d75157b


    Code Sign

    Headers

    Imports

    Sections

  • GVOD/UACTool.dll
    .dll windows:4 windows x86 arch:x86

    d0b2e4f290db1985d440db4554e14bf2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/UpdateCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    26109ef4a83f656c23133f77f3600e03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/Whatsnew.txt
  • GVOD/XLCrypto.dll
    .dll windows:4 windows x86 arch:x86

    4a01333d1673a520341f5d0fb358b573


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/al.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1453065020283e764f29cf37e50d6ac6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/asyn_frame.dat
  • GVOD/asyn_frame.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d82d70fff598b5cd80aab10e2e4728f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/backend_agent.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a180a4cfa03ce50c99133a548652573f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/dl_peer_id.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d3758c594888fd981d5b78ad288a0a5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/down_dispatcher.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2a2861fb752f9ffb26b67c41a937e6cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/download_interface.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    23f141aa729ca4a0ce2a6b87e58d3db4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/download_interface.ini
  • GVOD/error.dat
  • GVOD/fs.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    843de2b2c79dd388803592a4baae9c4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/mp.dll
    .dll windows:4 windows x86 arch:x86

    5eb73d86204ca34865ffbbadc69bd66a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/p2p.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f201a82ccbd2840619e09d4a5134ff7d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/p2p_local_res.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f4bd9e8e28a425539e5f42f97ef12a01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/p2p_upload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    89ea4ba6bc6768a9ee6a8c2a2d6c7074


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/p2sp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a2b7ac6215d74dadea903794a452f558


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/ptl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5216ff084e8295461ce928edac1f7d17


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/stat.dat
  • GVOD/stream.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    52ac4aa71cf9d9391fb63dbf15b61ab5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/streammedia.cfg
  • GVOD/tsf.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f51e5191d8bcc0b0b5b826513d56fca7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/upnp.exe
    .exe windows:4 windows x86 arch:x86

    75cfe3ad857c17f0b51c6076988bab31


    Code Sign

    Headers

    Imports

    Sections

  • GVOD/vd.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    dab5ae09abf905ea7a30bcbc8732a2bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/vr.bin
  • GVOD/xl_stat.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    47555bc151839cd47a7dfb97fc4a36d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GVOD/xlfw.exe
    .exe windows:5 windows x86 arch:x86

    66b0c89bef6f15e2276638814f4857f6


    Code Sign

    Headers

    Imports

    Sections

  • GVOD/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    7e3560e4dd2deaa398fa039458dd4b4b


    Headers

    Imports

    Exports

    Sections

  • GvodUninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $TEMP/xlfw.exe
    .exe windows:5 windows x86 arch:x86

    66b0c89bef6f15e2276638814f4857f6


    Code Sign

    Headers

    Imports

    Sections