General

  • Target

    d755e3415b73114531fa387e2f62e3b4_JaffaCakes118

  • Size

    1.1MB

  • MD5

    d755e3415b73114531fa387e2f62e3b4

  • SHA1

    06b3aca9e06965e05643a1eeec060207eb7064dc

  • SHA256

    9df989c768919bb11e86ebafa19f6e5948f969bf372e8cffa108c8f860a85aad

  • SHA512

    a5b2799066d9e67d270f186b565a6246bac229c2f738afc3ff6f5390eb55b5bf6af93829e43fad5779a98f04e26cc4ca9e95683b31d8e19a3b591ce1894e0ec8

  • SSDEEP

    24576:/rsqX3eUxqbbuD6ZFE7XNW/H7bWxBRUUFW3Y44444sNDntMG/POmyTvNFpKmw5zF://XUJwWihNCy5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d755e3415b73114531fa387e2f62e3b4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    ea9b3ea5cd9e2014ad3724e31f62cf5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VdSkin.dll
    .dll windows:5 windows x86 arch:x86

    58f4dc7794d1a1c89373297d547be6dd


    Headers

    Imports

    Exports

    Sections

  • $TEMP/vidownuninst/res/DuiLib.dll
    .dll windows:5 windows x86 arch:x86

    b8c874f3bf5cbced3d42c7e3d16d1725


    Headers

    Imports

    Exports

    Sections

  • $TEMP/vidownuninst/res/VidownUninstDlg.xml
  • $TEMP/vidownuninst/res/image/appframe_bk.png
    .png
  • $TEMP/vidownuninst/res/image/bg.png
    .png
  • $TEMP/vidownuninst/res/image/btn_small.png
    .png
  • $TEMP/vidownuninst/res/image/btn_small2.png
    .png
  • $TEMP/vidownuninst/res/image/continue_use_btn.png
    .png
  • $TEMP/vidownuninst/res/image/down_task_progress.png
    .png
  • $TEMP/vidownuninst/res/image/logo_140.png
    .png
  • $TEMP/vidownuninst/res/image/logo_18.png
    .png
  • $TEMP/vidownuninst/res/image/page_1.jpg
    .jpg
  • $TEMP/vidownuninst/res/image/page_2.jpg
    .jpg
  • $TEMP/vidownuninst/res/image/page_3.jpg
    .jpg
  • $TEMP/vidownuninst/res/image/progress.png
    .png
  • $TEMP/vidownuninst/res/image/progress_bk.png
    .png
  • $TEMP/vidownuninst/res/image/sys_select_checkbox.png
    .png
  • $TEMP/vidownuninst/res/image/sysbtn_close.png
    .png
  • $TEMP/vidownuninst/res/image/sysbtn_min.png
    .png
  • $TEMP/vidownuninst/res/image/uninstall_start_btn.png
    .png
  • $TEMP/vidownuninst/res/image/uninstall_success_btn.png
    .png