General

  • Target

    ef63fe268a9cdc955fd533edfe5c467c_JaffaCakes118

  • Size

    6.0MB

  • MD5

    ef63fe268a9cdc955fd533edfe5c467c

  • SHA1

    75c4d577bf130ce54655386a2bb120b49757ed00

  • SHA256

    cfab4ed2e3f1e4657d205cf9e59b267cf3039c613cf05e0634b62c92491274a2

  • SHA512

    a36ee504ea6e9bdf37b9c686a106cb4e3bc4176de510d317493f9e3a3694f1bc78cf961611ae2dd4c0675bc96cb4c5fdfb7ded29945a7fc0393c49de73c3c6f3

  • SSDEEP

    98304:OIyckDOBVY0uHM83gPGYzmHz4hodsmS7ZigCe380S25bPIfA9e1JuH1v7m9/5ZX:OIy6Be0usNuq+z4oZi0MbX9e6FEhZX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • ef63fe268a9cdc955fd533edfe5c467c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CommonModule.dll
    .dll windows:4 windows x86 arch:x86

    7177eca598221042005b82720773af77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.1.9.5.0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    73d1a2bc86d22d9f838d7ce25f812fdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    37c57c99267b241d11cb1f6f96b0ba5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/HTTP_ASF_SOURCE.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/Hookkernel.dll
    .dll windows:4 windows x86 arch:x86

    e7328b6b6f5325a179b8713ed3ab38ff


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    109c032cfbd301a5463d71c5477714b2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    3ec1562ecdfd7b5d4e954855b4d24533


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    643001b44233e1462704433de91a41cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OPlayer.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    de5b456db94e98503b9e5a26c539a61a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    74f5181bd9e54e44328ea737de8d9c95


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPDownLoad.dll
    .dll windows:4 windows x86 arch:x86

    df56711d45356c3ef00f0f163e5c3236


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPVADlg.dll
    .dll windows:4 windows x86 arch:x86

    0a29364c886f2e690e9331e96adba3d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Send_Log_Kernel_Module.dll
    .dll windows:4 windows x86 arch:x86

    43e12366080d2670a77e2262b7a2a482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TipsClient.dll
    .dll windows:4 windows x86 arch:x86

    06ad09e6be2147029215bcc7830d3de7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VABrowser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bf639c94ed5d793938731626a077ddbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VAProxyD.dll
    .dll windows:4 windows x86 arch:x86

    c3502aeb4d5cff18ed59ececfbd2c70f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VideoCommendModule.dll
    .dll windows:4 windows x86 arch:x86

    f45fcb9ff5184c038a3ef667de2fb382


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    b39573651299945a37723a9649421097


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ifupt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7d48850b7e08d1379c0d255474652f7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ikan-p.ico
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e7b5c64fa3c56bd4baa47127937cf832


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    8625ffcb7fea95deff70f1c8a4974193


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/peer.dll
    .dll windows:4 windows x86 arch:x86

    9c763275bcc069601077471b5b441ae9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/plugMng.dll
    .dll windows:4 windows x86 arch:x86

    8891573555f6ed58732eaf439095dfa6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e15dea649cfaf1183f2f8e7ab4c8ef36


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    dc94b21b23329404879193948542d0b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sop.dll
    .dll windows:4 windows x86 arch:x86

    e0ff0f02a515354e34bc669d87d79cb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tpi.dll
    .dll windows:4 windows x86 arch:x86

    90547e4eb5ec31263ac362ca3152bc21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b21dc5aac1fb39dced130358580e621


    Code Sign

    Headers

    Imports

    Exports

    Sections