General

  • Target

    dce0f94dd48e6a4fdcd6527411a61cd6_JaffaCakes118

  • Size

    3.3MB

  • MD5

    dce0f94dd48e6a4fdcd6527411a61cd6

  • SHA1

    bd700b176569970769e988ee8b2b83a50afe6b0e

  • SHA256

    dc5a185d2651be29b770edef65f3d44e9d17ee6cc2540165dbce0749aff97f2d

  • SHA512

    83da22dccc2f82c963d24526dd38fb0b38f98a13b9459cd13cd515bdab46c3e1cd0564bbf6b56320c4fc7de99cfa6a247541b0e78dcdf82adf4bff410ebf9699

  • SSDEEP

    98304:9eOpB5iz/qtp8dc5tuIGkVVdwtyHLwZc1P:9/Az/qH8dc5gtErwK1P

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • dce0f94dd48e6a4fdcd6527411a61cd6_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.2.0.0.0.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    a51dab6f4a70c7f5108331c3fee35df0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/HTTP_ASF_SOURCE.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/Hookkernel.dll
    .dll windows:5 windows x86 arch:x86

    39a0c6105a00746b436b64ffd0d840f1


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    3ec1562ecdfd7b5d4e954855b4d24533


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MP4Splitter.ax
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    828641f1105cc2848d34b35b9507973b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    a7c2770340db65b3dcb79c29aa100aca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPHookShell.dll
    .dll windows:5 windows x86 arch:x86

    89f107d056c4c082a3da5d76aa15ed89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Send_Log_Kernel_Module.dll
    .dll windows:4 windows x86 arch:x86

    43e12366080d2670a77e2262b7a2a482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TipsClient.dll
    .dll windows:4 windows x86 arch:x86

    301f2e86b305b31b8b19e00f1ccf671f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VAProxyD.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e586c520f98f673af885b7292e05329


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bb78226d197877143f0a15c58e91747a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/audioswitcher.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    44d6c239fec5f9a713dd7e36b1afeee9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    ecf049fd1e443d20553200f13e1deea6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    1bb9ac75bcddcad19ef884bc3d73f3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/peer.dll
    .dll windows:4 windows x86 arch:x86

    59bb48a02cfe57e8ecbb5a95e967786e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sop.dll
    .dll windows:5 windows x86 arch:x86

    9b2ec207641fa564463cd5a4c15c2d64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tpi.dll
    .dll windows:4 windows x86 arch:x86

    90547e4eb5ec31263ac362ca3152bc21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    68dae925442872f00bb7887e624383fd


    Code Sign

    Headers

    Imports

    Exports

    Sections