General

  • Target

    dc49ff7fa681d8b9fdd625dc2bd19c1a_JaffaCakes118

  • Size

    3.9MB

  • MD5

    dc49ff7fa681d8b9fdd625dc2bd19c1a

  • SHA1

    ff809573a7f651b07120b2d0654aca6bdd1635b8

  • SHA256

    1840002341102ad3a5fe81300cb65f2ca9772a13d7d0dc50dc6dd3db11274c21

  • SHA512

    6200c9caf2358740604c12bc07054495b68d48cd526064e1172d40cd7f8fcb7446bd8e6bc699879d07f1e80c8e26f592da456bfb66466f438cb2876cad40cd78

  • SSDEEP

    98304:pPnTbc1yh4oI3GUUctQt1Ib8TLI3E73GKqYFtHW:pPnvuyqWUU7jDTUU73GR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • dc49ff7fa681d8b9fdd625dc2bd19c1a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BUTTOM.gif
    .gif
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    6e6f31598f6feac8d11a960c141cda24


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2274cc1534607459cdd304a928601ef9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/endoptions.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsSCM.dll
    .dll windows:4 windows x86 arch:x86

    cae3b41a07819ca715746a4d081b8a6c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • AutoPatch.ini
  • BSCoreNew.dll
    .dll windows:5 windows x86 arch:x86

    e9539d24bad9ac8b291d93ad7649a92a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CheckDb.dll
    .dll windows:5 windows x86 arch:x86

    07f2145f1ffccecd90a06669098cff86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MinisiteSetting.ini
  • P2PClient.dll
    .dll windows:5 windows x86 arch:x86

    c63f223ca4d4d4ecc98588ff0eb1efe3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SeSetup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • SddRun.dll
    .dll windows:5 windows x86 arch:x86

    b156256615ee486eb70be1185c4ad87d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SddSUpdate.exe
    .exe windows:5 windows x86 arch:x86

    3ff0f95f07a43f857bc0e5fbf3d6c653


    Code Sign

    Headers

    Imports

    Sections

  • sddutils.dll
    .dll windows:5 windows x86 arch:x86

    bdc9b64f6376688fd80c68137faea123


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • VersionCheckList.dat
  • behavior.dll
    .dll windows:4 windows x86 arch:x86

    f85147070938bb6ec410c11ae1da1c65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cache/icons/00C9573FDDCA7F11BE0B9BA897E4C224.gif
    .gif
  • cache/icons/02365F9A95A4944EA2D634FDA2957A3C.gif
    .gif
  • cache/icons/034EC2097CD44E1D430732354ADE8891.gif
    .gif
  • cache/icons/06C8D51E98317EC37A8449F95CC44B44.gif
    .gif
  • cache/icons/13AD153458EF4BE61D20D9489C8C8B1D.gif
    .gif
  • cache/icons/13B8295DD186FEAF01189CF701B04312.gif
    .gif
  • cache/icons/1FFD877BF323D9A708B791DA0CB67BF0.gif
    .gif
  • cache/icons/29B83D8FC781C12737970BF75945B238.gif
    .gif
  • cache/icons/2E63E1D0DB17E759C1F10377DB10F09F.gif
    .gif
  • cache/icons/2EFA104FE1547179BDD06D7C5CA6B4DE.gif
  • cache/icons/2F2BD5F7D41AE1E5A49DCD9F532C029C.gif
    .gif
  • cache/icons/31B5216BF0D40943426CA5A0B17A39B4.gif
    .gif
  • cache/icons/32E133E4BCE992C41AAA37671E16C995.gif
    .gif
  • cache/icons/384A45AAD3781A5CF9609518E9AB5282.gif
  • cache/icons/388AEBFD8C0A482F32CA5F8F07C703CF.gif
    .gif
  • cache/icons/3E8DAFA0A3F952C0A7D097D2EEA1B884.gif
    .gif
  • cache/icons/45E6D00FC43A0A48FD552EF40F8C8370.gif
    .gif
  • cache/icons/4934B62618D6029315DFE50DAAD6FE4D.gif
    .gif
  • cache/icons/4F23F7985517429AB43BD43EFBE2394F.gif
    .gif
  • cache/icons/5104395A33686EDB52679CEB444412C0.gif
    .gif
  • cache/icons/54188C464E46A868CDF50EACC6F2796F.gif
    .gif
  • cache/icons/58CF4472E5DBAE4F07554335F7D3795D.gif
  • cache/icons/5CC1C5DB0DDAF1939BE0D625AD68AA90.gif
    .gif
  • cache/icons/5CD2CD73AD33626965DE6B349FC060B3.gif
    .gif
  • cache/icons/5DC6443CDEACE054ED44471E192C5BAF.gif
  • cache/icons/6096B262E7F1C58D4C5B48ED4EEBEF0E.gif
    .gif
  • cache/icons/611B81582C4D396993753E1615F85B9B.gif
    .gif
  • cache/icons/62B8F29129D53039D12AFEB8B88B4BC0.gif
    .gif
  • cache/icons/71D61F04780AC2DD29D1D4855C8C9F45.gif
  • cache/icons/7545098DD33B0165AD0E34C924E601C0.gif
    .gif
  • cache/icons/7644D0AD10EF22A8F8E944A05741D89D.gif
  • cache/icons/76E77571E0D70BD6B928D45B33BE11A0.gif
    .gif
  • cache/icons/7729E0B10AAC58C8A5623B6E4E10A44F.gif
  • cache/icons/79A3A2502C68E43BE6B5F34EB583C938.gif
    .gif
  • cache/icons/79B5B51D38000E60B8B3AAE063409C49.gif
  • cache/icons/85C6F66FCF868EA7A5202771A90DFC2B.gif
    .gif
  • cache/icons/86329B6E4E0C55498114B7E7CF221385.gif
    .gif
  • cache/icons/875D993AF6B58F1187E4E1C8709BE1FE.gif
    .gif
  • cache/icons/8A5D152BE0A51F8D0C5975A6E5297934.gif
    .gif
  • cache/icons/8DCF4487F393351C135EEBCFD2166290.gif
  • cache/icons/9077174D05A4E63E6D5E48FBCEB84648.gif
  • cache/icons/92C70386D78745C77A88A6692D6E31CC.gif
    .gif
  • cache/icons/9A1E7CA4E61402C28052AF5B362B435E.gif
    .gif
  • cache/icons/9E8BF8CE211766B9980A82E12A45DC57.gif
    .gif
  • cache/icons/9E8C0CD376113E7A8E37843D46264570.gif
  • cache/icons/A2CA01678B06C74DB2BAE7AA20EC85AE.gif
    .gif
  • cache/icons/A3B03F781EA0D4A9C0B44424DD908F03.gif
    .gif
  • cache/icons/A4AFCD00DD300587258CCEDC38E2F891.gif
    .gif
  • cache/icons/A7ADE2AD4964B17C4713C6B3007BA9D7.gif
  • cache/icons/ADF96889F1B69C3C73F611E1FCFB5074.gif
  • cache/icons/B04E51AB3FAE808B2CE65D9EFB1A1A60.gif
  • cache/icons/B0BF0A390C4EDC827580CC970FD689FD.gif
    .gif
  • cache/icons/B6D708C83CC35AA9392D3F7C4270669E.gif
    .gif
  • cache/icons/B73A91EAF8D73928684DED5DC2514E3C.gif
    .gif
  • cache/icons/B821A33AF3970570BEDAAD710D62B02E.gif
    .gif
  • cache/icons/B96EDD6A348DF54DCF8BC79C0974121E.gif
    .gif
  • cache/icons/BB89F755FC739778525CD13F12B94629.gif
    .gif
  • cache/icons/BBDC29C30B47C0AF9CDC5A9598568EE6.gif
    .gif
  • cache/icons/C93C7B30B67FD0A5CC216F2B9812A756.gif
    .gif
  • cache/icons/CCA20B233622347478FD2857C36A1304.gif
    .gif
  • cache/icons/CCCBE82982FE6B8201D77E4AFB379590.gif
    .gif
  • cache/icons/D01ED924926EF35C2FADC83429D72919.gif
    .gif
  • cache/icons/DB347650732B86E784D9CED87B82BCCE.gif
    .gif
  • cache/icons/DC4D35BC56E0668C863DC0538A7A405C.gif
    .gif
  • cache/icons/DD4775C182156F59E14EC298C04880B1.gif
    .gif
  • cache/icons/DE62E299D1F11E0C531744D4605B801D.gif
    .gif
  • cache/icons/DF0FF6F272E00B476C9277A170EE84F6.gif
    .gif
  • cache/icons/E0C2073448111E2C08AF7FB7BBE4B522.gif
    .gif
  • cache/icons/E18B828A7C93BF518EF990D41CEABE7E.gif
    .gif
  • cache/icons/E1DF2D3CE49453E6C049BDAB7EE3BCD7.gif
    .gif
  • cache/icons/E1F2CA87F1EC5D31AE41041DB462CE24.gif
    .gif
  • cache/icons/E31A30A49212EF9B6CF214A87DA605D4.gif
  • cache/icons/E37347B1A8D9364E850A25B86957B872.gif
    .gif
  • cache/icons/E45063A9ADEFB164FAB39319E63A3FB9.gif
    .gif
  • cache/icons/EA57F5CF6EB9EF0B0F6EBD9A6E700E2F.gif
    .gif
  • cache/icons/EC23091CF016F671500D66628348A2CF.gif
    .gif
  • cache/icons/F669511CBA32378BCB327F65ABDF28A0.gif
    .gif
  • cache/icons/FE99414C5B8FC45883D1932F502040B8.gif
  • candyradio.exe
    .exe windows:4 windows x86 arch:x86

    f8013638ce5634c3b3aa4d39a046a330


    Code Sign

    Headers

    Imports

    Sections

  • candyradio.ini
  • canupdate.dll
    .dll windows:4 windows x86 arch:x86

    817cb43531bb63ebf621361d6e1dff35


    Headers

    Imports

    Exports

    Sections

  • categories.xml
    .xml
  • clientconf.ini
  • filehash.ini
  • images/Tab-Down.gif
    .gif
  • images/Tab-Over.gif
    .gif
  • images/Tab.gif
    .gif
  • images/bluebtn.gif
    .gif
  • images/bottom.gif
    .gif
  • images/bottomleft.gif
    .gif
  • images/bottomright.gif
    .gif
  • images/catetab_02.gif
    .gif
  • images/delete.png
    .png
  • images/lbluebtn.gif
    .gif
  • images/left.gif
    .gif
  • images/leftback.gif
    .gif
  • images/load/load1.gif
    .gif
  • images/load/load2.gif
    .gif
  • images/load/load3.gif
    .gif
  • images/load/load4.gif
    .gif
  • images/load/load5.gif
    .gif
  • images/load/load6.gif
    .gif
  • images/load/load7.gif
    .gif
  • images/load/load8.gif
    .gif
  • images/minisite-down.png
    .png
  • images/minisite-over.png
    .png
  • images/minisite.png
    .png
  • images/redbtn.gif
    .gif
  • images/right.gif
    .gif
  • images/spacer.gif
    .gif
  • images/start.png
    .png
  • images/stop.png
    .png
  • images/subtab-down.png
    .png
  • images/subtab-over.png
    .png
  • images/subtab.png
    .png
  • images/subtab2.png
    .png
  • images/tab-active.png
    .png
  • images/tab-back-left.gif
    .gif
  • images/tab-back-right.gif
    .gif
  • images/tab-down.png
    .png
  • images/tab-over.png
    .png
  • images/tab.png
    .png
  • images/tabs.png
    .png
  • images/tray.ico
  • images/ҵϷ.png
    .png
  • images/Ϸ.png
    .png
  • images/Ϸ.png
    .png
  • images/.png
    .png
  • liveupd/dat.inf
  • liveupd/update.inf
  • liveupdsrv.exe
    .exe windows:4 windows x86 arch:x86

    b8f650f535927ca5467a05419446f348


    Code Sign

    Headers

    Imports

    Sections

  • mid.dll
    .dll windows:4 windows x86 arch:x86

    5036a00ab02ee3a854c622afcc8a77f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • modules/sndagames.dll
    .dll windows:4 windows x86 arch:x86

    04385321973188a8ee62a38b444222df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pCheckDb.exe
    .exe windows:4 windows x86 arch:x86

    72e2858aeb86dc58cd536aeb7876e689


    Code Sign

    Headers

    Imports

    Sections

  • pcre3.dll
    .dll windows:4 windows x86 arch:x86

    f867eaba1f47d94594c5bf1041b8c10b


    Headers

    Imports

    Exports

    Sections

  • programs.dat
  • sdDown.exe
    .exe windows:4 windows x86 arch:x86

    04aaca0b972573c55ecc01af729bcab2


    Code Sign

    Headers

    Imports

    Sections

  • sddALog.dll
    .dll windows:5 windows x86 arch:x86

    6e0c1011614e810936c7870b3307614f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sddinfo.dll
    .dll windows:4 windows x86 arch:x86

    19b4d0044182c3aa51592665ab6107f3


    Headers

    Imports

    Exports

    Sections

  • sddldcom.dll
    .dll windows:4 windows x86 arch:x86

    97a2dc6569017addbd25955f43c2d113


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sddmq.dll
    .dll windows:4 windows x86 arch:x86

    2278ea8fdd756c9e949fa5fbfd82b2e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sddup.dll
    .dll windows:4 windows x86 arch:x86

    844b351aae55b48cb820ca071c77c974


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sendlog.dll
    .dll windows:5 windows x86 arch:x86

    dee7a77732021120812f723813360e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings.ini
  • skins/main1.7.skn
  • skins/minibrow.skn
  • skins/popup2.skn
  • skins/vistablue1.7.skn
  • software.xml
    .xml
  • uninst.exe.nsis
  • utillib.dll
    .dll windows:4 windows x86 arch:x86

    b01938b3826f7d4f89e82ddc87c1609d


    Code Sign

    Headers

    Imports

    Exports

    Sections