General

  • Target

    7666ac8f5492991df95820daef083eba_JaffaCakes118

  • Size

    1.7MB

  • MD5

    7666ac8f5492991df95820daef083eba

  • SHA1

    ecc2456481c655d34f6a1d1511fb40298adff73a

  • SHA256

    c15aa29c1d976202f85be8c173325074031a827251e40f28ee5432dc6836677e

  • SHA512

    65f92a7861545b3c61bee2e48f469623767e9f4b8faa2a877beb1b61d2e2863019adccd566f2a024d6079507bbe64b93a87bebd847c38bc95bbb5c22e0a8792a

  • SSDEEP

    49152:pA1Kk4TsTYoo92y12gNEAMF56eOBT4bbWrPEKSxUOEvgdcE:plk4TkPwpNhOY5yWrPEKSxUqF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 7666ac8f5492991df95820daef083eba_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/114la.ico
  • $PLUGINSDIR/115br.bmp
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86

    e57536e0d3500471d52df7cea0d65a39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/udown115.ini
  • UDown.exe
    .exe windows:5 windows x86 arch:x86

    c2b079832cd0f9bcf777052da482c625


    Code Sign

    Headers

    Imports

    Sections

  • UDownAgent.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a836a01794c18a6cdbf0015ddb2714c8


    Headers

    Imports

    Exports

    Sections

  • UPnP.dll
    .dll windows:5 windows x86 arch:x86

    16f23b9b7ae67e751e5c3732494920e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • down.wav
  • getAllUrl.htm
    .html .vbs polyglot
  • getUrl.htm
    .html .js polyglot
  • uninst.exe.nsis
  • up.wav