General

  • Target

    d9f53ba5a6312cb14543423114843e59_JaffaCakes118

  • Size

    1.7MB

  • MD5

    d9f53ba5a6312cb14543423114843e59

  • SHA1

    0c4bc75cabea9c01ffd11d6d85e97500b8063200

  • SHA256

    17a467f8199a4d72a4b80ea30b7609ad267c4b6261e48682afb16fabba2f1275

  • SHA512

    06c8893a4e5fa80fcdcf327c543fa65a1abb129ebdc65076e6aa365499279e4ddd87e01ae24c16c7f8e96f874bc74b596c452fc18aa01f7ce3452cd1b6fb288e

  • SSDEEP

    49152:EHeOHTXDiXKtoqcOrq7zhOGJKheWwFXz7xH3PBl3:YeO3FtKOrqxOGJSejFD75PT3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d9f53ba5a6312cb14543423114843e59_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Headers

    Imports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    77e580ab607c48dfa294a5b7ae2f07dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    8b09590074c9596dc529d255269e0815


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/uilib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b21dc5aac1fb39dced130358580e621


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/kernel/$OUTDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/kernel/live/$OUTDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    97cd466186ada82f5db40728997a3c96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/kernel/live/$OUTDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    1bb9ac75bcddcad19ef884bc3d73f3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/player/$OUTDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.ax
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    97cd466186ada82f5db40728997a3c96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    77e580ab607c48dfa294a5b7ae2f07dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    8b09590074c9596dc529d255269e0815


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPInstallLog.dll
    .dll windows:4 windows x86 arch:x86

    256af4ebe940c94257ae641d926c73e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ikan-p.ico
  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b1a4cd97a03147d1e3e766f3602fd630


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    1bb9ac75bcddcad19ef884bc3d73f3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2a8bfb8a1144751d8d12e443415e4f1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    46929088280429ac3354990b94720261


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/time.dll
    .dll windows:4 windows x86 arch:x86

    2e3a4d1f132aea64d421c1e936bcc407


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b21dc5aac1fb39dced130358580e621


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/$OUTDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2a8bfb8a1144751d8d12e443415e4f1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.0.13/$OUTDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b1a4cd97a03147d1e3e766f3602fd630


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.0.13/$OUTDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    46929088280429ac3354990b94720261


    Code Sign

    Headers

    Imports

    Exports

    Sections