General

  • Target

    94080cd423636e6ffb065f5d1c00eca1_JaffaCakes118

  • Size

    843KB

  • MD5

    94080cd423636e6ffb065f5d1c00eca1

  • SHA1

    73789d81e2d9aac3416f2ad106b0700a6d4f6dcb

  • SHA256

    01f092a8ed9f8ed6c2f29a520b38b05fec7f498ee93a5ac18ef8b73e92e3f465

  • SHA512

    aa67330f583043ca6f96e6ffda4cbf2ddc3a208c10a551851d1f335e735e932b483637aa0c7b8d2da94e28a93f52d07e90a292b650d161d7d6b51e00a4572f75

  • SSDEEP

    24576:sAwHw/4mqH3I7pOlcbjCGkEPWlQNxXFXA7us9wY:RVCXI74lcfCGkEPWlCxXFXAiY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 94080cd423636e6ffb065f5d1c00eca1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLDownLoader.dll
    .dll windows:4 windows x86 arch:x86

    2be5c75b54508e5f9ce230cd7d1c100a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExAddPage.dll
    .dll windows:4 windows x86 arch:x86

    a31423df96accd7f6a5fcbbc3f31973a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FILEDownPlug.dll
    .dll windows:4 windows x86 arch:x86

    6de7e665949d01730498664eca6dc12b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IsVista.dll
    .dll windows:4 windows x86 arch:x86

    efa700f367af492674a29b601d27bd91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ischeck.dll
    .dll windows:4 windows x86 arch:x86

    251a9619bbd921d60321154c493fcc9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LiveChk.dll
    .dll windows:4 windows x86 arch:x86

    61d7250d1f0e49e7d8f5ab4e906c3bf3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPromotionEx.ini
  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserMgr.dll
    .dll windows:4 windows x86 arch:x86

    bac2b3d4a0df9a23aee940b8ecd0d168


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ancameralicense3_7.txt
  • $PLUGINSDIR/installoption.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stack.dll
    .dll windows:4 windows x86 arch:x86

    55ae76a2cfe164921f566c03cfbba5ec


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ancamera.xml
    .xml
  • Uninstall.exe.nsis
  • ancamera3.exe
    .exe windows:4 windows x86 arch:x86

    ee60b3637fdd368466bcc67c02589c3f


    Headers

    Imports

    Exports

    Sections

  • ancameraup.exe
    .exe windows:4 windows x86 arch:x86

    92312a1435053e68a4039ae813453592


    Headers

    Imports

    Sections