General

  • Target

    726125b670dc0511a8af6824a196c118_JaffaCakes118

  • Size

    5.8MB

  • MD5

    726125b670dc0511a8af6824a196c118

  • SHA1

    af3b2c270dc1bee81f46170e09bf92b010377aea

  • SHA256

    d31dcc807fae1edce8aead78306e4b3a4c472e5f955a9a7485be883098d3b195

  • SHA512

    67bad7e4ed2ee97d73ab56658c59a3beca2d8c814839ef6f921e91f570d0f9df7117130d898de16eacf6283ddf62aeea8d2925a1e541967ccda59e7679f0ee57

  • SSDEEP

    98304:tZLszifheCzy/mEAEYjCA7SRLojxJtH2xfy1rWoR2G+iMOZILkUqYOz5Ks1SdAO6:tN3f7GdYjFeqPtsfy1rz4GPMOZIgXYO1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 726125b670dc0511a8af6824a196c118_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    00383d7187101fe8163d3fcd4c2ace37


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TypeLib.dll
    .dll windows:4 windows x86 arch:x86

    eb1a2c7475dd540716bf042f99de49fc


    Headers

    Imports

    Exports

    Sections

  • $R0
  • $R2/NSIS.Library.RegTool.v2.$_4_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • Archive/7-zip/Codecs/Deflate.dll
    .dll windows:4 windows x86 arch:x86

    e399cf2d2f743a2f153875e3bca83383


    Headers

    Imports

    Exports

    Sections

  • Archive/7-zip/Formats/arj.dll
    .dll windows:4 windows x86 arch:x86

    fcb5cd8331e6da9dec6935abc7333988


    Headers

    Imports

    Exports

    Sections

  • Archive/7-zip/Formats/zip.dll
    .dll windows:4 windows x86 arch:x86

    7a56f71716a7e5ea982eff2c0850d5c7


    Headers

    Imports

    Exports

    Sections

  • Archive/unrar.dll
    .dll windows:4 windows x86 arch:x86

    244d2f9772f4886a651db44514a2a29b


    Headers

    Imports

    Exports

    Sections

  • FUM/fum.tlb
  • FUM/fumcore.dll
    .dll windows:4 windows x86 arch:x86

    8b4fccf6b07a7c39f652120e9a956877


    Headers

    Imports

    Exports

    Sections

  • Firefox/extension/chrome.manifest
  • Firefox/extension/chrome/content/fdm_ffext.js
    .js
  • Firefox/extension/chrome/content/fdm_ffext.xul
    .xml
  • Firefox/extension/chrome/content/fdm_ffextDM.js
    .js
  • Firefox/extension/chrome/content/fdm_ffextDM.xul
    .xml
  • Firefox/extension/chrome/content/fdm_ffpxy.js
    .js
  • Firefox/extension/components/ivmsfdmff.xpt
  • Firefox/extension/components/vmsfdmff.dll
    .dll windows:4 windows x86 arch:x86

    cce055eaf1fcc04955d8ee670f634600


    Headers

    Imports

    Exports

    Sections

  • Firefox/extension/install.rdf
    .xml
  • Help/Free Download Manager.chm
    .chm
  • Language/alb.lng
  • Language/arb.lng
  • Language/bul.lng
  • Language/cat.lng
  • Language/chs.lng
  • Language/cht.lng
  • Language/cro.lng
  • Language/czk.lng
  • Language/dan.lng
  • Language/dut.lng
  • Language/ell.lng
    .vbs
  • Language/eng.lng
    .vbs
  • Language/far.lng
    .vbs
  • Language/fin.lng
  • Language/fre.lng
    .vbs
  • Language/gal.lng
  • Language/ger.lng
  • Language/heb.lng
  • Language/hun.lng
    .vbs
  • Language/ita.lng
  • Language/jpn.lng
  • Language/kor.lng
  • Language/lt.lng
  • Language/mac.lng
  • Language/nor.LNG
  • Language/pol.lng
  • Language/pt_PT.lng
  • Language/ptbr.lng
  • Language/rom.lng
    .vbs
  • Language/rus.lng
  • Language/slo.lng
  • Language/spn.lng
  • Language/srb.lng
  • Language/svk.lng
  • Language/swe.lng
  • Language/tha.lng
    .vbs
  • Language/tur.lng
  • Language/ukr.lng
  • Language/uzb.lng
  • Language/val.lng
    .vbs
  • Language/vie.lng
  • MediaConverter.dll
    .dll windows:4 windows x86 arch:x86

    e934968b9bec6ed2098f850b44ad889d


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT.manifest
    .xml
  • Server/adddownloadres_err.html
    .html
  • Server/adddownloadres_ok.html
    .html
  • Server/compdlds.html
    .html
  • Server/index.html
    .html
  • Skins/How to create a skin.url
  • Skins/old style/back.bmp
  • Skins/old style/back_d.bmp
  • Skins/old style/checks.bmp
  • Skins/old style/choosefolder.ico
  • Skins/old style/creategroup.ico
  • Skins/old style/dldtasks.bmp
  • Skins/old style/dldtasks_sel.bmp
  • Skins/old style/dlinfo.bmp
  • Skins/old style/dropbox.ico
  • Skins/old style/filelist.bmp
  • Skins/old style/filelist_sel.bmp
  • Skins/old style/go.bmp
  • Skins/old style/groups.bmp
  • Skins/old style/groupsmenu.bmp
  • Skins/old style/groupsmenu_d.bmp
  • Skins/old style/login.ico
  • Skins/old style/logstat.bmp
  • Skins/old style/mute.bmp
  • Skins/old style/scheduler.bmp
  • Skins/old style/scheduler_sel.bmp
  • Skins/old style/settime.ico
  • Skins/old style/sitelist.bmp
  • Skins/old style/sitelist_sel.bmp
  • Skins/old style/skin.ini
  • Skins/old style/tool0.bmp
  • Skins/old style/tool0_d.bmp
  • Skins/old style/tool0_small.bmp
  • Skins/old style/tool0_small_d.bmp
  • Skins/old style/tool_bt.bmp
  • Skins/old style/tool_bt_d.bmp
  • Skins/old style/tool_bt_small.bmp
  • Skins/old style/tool_bt_small_d.bmp
  • Skins/old style/tool_dld.bmp
  • Skins/old style/tool_dld_d.bmp
  • Skins/old style/tool_dld_small.bmp
  • Skins/old style/tool_dld_small_d.bmp
  • Skins/old style/tool_hfe.bmp
  • Skins/old style/tool_hfe_d.bmp
  • Skins/old style/tool_hfe_small.bmp
  • Skins/old style/tool_hfe_small_d.bmp
  • Skins/old style/tool_sch.bmp
  • Skins/old style/tool_sch_d.bmp
  • Skins/old style/tool_sch_small.bmp
  • Skins/old style/tool_sch_small_d.bmp
  • Skins/old style/tool_sites.bmp
  • Skins/old style/tool_sites_d.bmp
  • Skins/old style/tool_sites_small.bmp
  • Skins/old style/tool_sites_small_d.bmp
  • Skins/old style/tool_spider.bmp
  • Skins/old style/tool_spider_d.bmp
  • Skins/old style/tool_spider_small.bmp
  • Skins/old style/tool_spider_small_d.bmp
  • Skins/old style/tosel.ico
  • Skins/old style/tounsel.ico
  • Skins/old style/tray.ico
  • Skins/old style/tray_down.ico
  • Skins/old style/tray_err.ico
  • Skins/old style/tray_starting.ico
  • Skins/old style/vidman.bmp
  • Skins/old style/vidman_d.bmp
  • Updater.exe
    .exe windows:4 windows x86 arch:x86

    9435da0104226d8edd5f21779635910a


    Headers

    Imports

    Sections

  • dbghelp.dll
    .dll windows:5 windows x86 arch:x86

    515ee46e8930abe46e0569a1a18643ae


    Headers

    Imports

    Exports

    Sections

  • dlall.htm
    .vbs
  • dlfvideo.htm
    .html .js polyglot
  • dllink.htm
    .html .js polyglot
  • dlpage.htm
    .vbs
  • dlselected.htm
    .vbs
  • fdm.exe
    .exe windows:4 windows x86 arch:x86

    1ac28ae1d734ffddddf20b63ce462b62


    Headers

    Imports

    Sections

  • fdm.tlb
  • fdm.url
  • fdm_01.gif
    .gif
  • fdmbtsupp.dll
    .dll windows:4 windows x86 arch:x86

    60cdf11c9996b26fe341d03ee5592721


    Headers

    Imports

    Exports

    Sections

  • fdmcs.dat
  • fdmwi.exe
    .exe windows:4 windows x86 arch:x86

    32f6b10910a16015ec1adbc19118d46a


    Headers

    Imports

    Sections

  • iefdm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e62920d2821980c5ac54bdd08f0aac24


    Headers

    Imports

    Exports

    Sections

  • iefdm2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    11db7411dcc3117a2c04d8b9eb835bc7


    Headers

    Imports

    Exports

    Sections

  • iefdmdm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    36e2bbc0a49f7b22dcd853c086b4d585


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • npfdm.dll
    .dll windows:4 windows x86 arch:x86

    0782983d2da5eecb9061b84b770d3e93


    Headers

    Imports

    Exports

    Sections

  • player.swf
  • uninst.exe.nsis
  • vistafx.dll
    .dll windows:4 windows x86 arch:x86

    4daa6f499cee7609ea3e86ba4e0e5d06


    Headers

    Imports

    Exports

    Sections