General

  • Target

    f4db6a125e3d059b2f0b52533ae18a43_JaffaCakes118

  • Size

    15.0MB

  • MD5

    f4db6a125e3d059b2f0b52533ae18a43

  • SHA1

    ca73d8155ec8e3e6a1df55b4c375c8882c799470

  • SHA256

    1821d19dc59274e2ce3d5e9b3bdf330aa245502ebb247f421577565ffc3440ba

  • SHA512

    c3cbb4010b52089f1676bd093cb59d56163bf102a0dc70164c6c372cc82eb41e20c93c104d1e5a18888f5b014e9e037335ffccf5557db8bdfdafeede4fe1caca

  • SSDEEP

    196608:yjlFoWLV3ji0yu6Y5e3xPW4bIUmpfxtTrEt/lQPhkUbqIXakPXIMYOBf8OAlEDAd:ynRV3e0yHiT4kUxZlQPhGVwbYcPDASvy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • f4db6a125e3d059b2f0b52533ae18a43_JaffaCakes118
    .rar
  • Bandicam/bandicam.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/D3DCompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/d3dx11_43.dll
    .dll windows:6 windows x86 arch:x86

    a21b4a7ea49a55d76ec8ead5ff32f73d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/vcomp140.dll
    .dll windows:6 windows x86 arch:x86

    4e2bdf3570f0309d9d2a75b473cb9395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/BDMPEG1SETUP.EXE
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/bdmjpeg.dll
    .dll windows:5 windows x86 arch:x86

    8950e1a0317525f0385b9af601337740


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmjpeg64.dll
    .dll windows:5 windows x64 arch:x64

    04208dfcd9f4d104fd3657338692098d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpega.acm
    .dll windows:5 windows x86 arch:x86

    a59629a50eafc3a20d9d62c5f0118409


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpega64.acm
    .dll windows:5 windows x64 arch:x64

    3259065632343fd95fdf829cba05685c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpegv.dll
    .dll windows:5 windows x86 arch:x86

    bf6c7259ffaa7b3eb59b7d97edcbb647


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpegv64.dll
    .dll windows:5 windows x64 arch:x64

    1c3318cf9e21cee7c0d17aa9a319a3c6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/bdfilters.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    27f07fb2c76df7e3ac5b98f25b3ec3e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdfilters.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    27f07fb2c76df7e3ac5b98f25b3ec3e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdfilters64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    03c1aad04c80a2e0fd5bd4c160a3d1d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis
  • amf-component-vce-windesktop32.dll
    .dll windows:5 windows x86 arch:x86

    e9c51331dcc7bf5953bf4c147a84ddfe


    Headers

    Imports

    Exports

    Sections

  • amf-component-vce-windesktop64.dll
    .dll windows:5 windows x64 arch:x64

    a143a61992492f4b79124b93ec75ab70


    Headers

    Imports

    Exports

    Sections

  • amf-core-windesktop32.dll
    .dll windows:5 windows x86 arch:x86

    643a60eb62917b6b37bbd846f6dbd4fe


    Headers

    Imports

    Exports

    Sections

  • amf-core-windesktop64.dll
    .dll windows:5 windows x64 arch:x64

    acebbeddf7526b925291a4da4aa03192


    Headers

    Imports

    Exports

    Sections

  • bandicam.ini
  • bdcam.dll
    .dll windows:6 windows x86 arch:x86

    8aa4e734b4be26aab588811049354144


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam.exe
    .exe windows:6 windows x86 arch:x86

    10eb1b11a0fde69077eca26d0030773c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam64.bin
    .exe windows:6 windows x64 arch:x64

    3302bbff9943ec9a17f72a6a22f6b050


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam64.dll
    .dll windows:6 windows x64 arch:x64

    d2b444635628c1b52d69b3bb10a0f03e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamih.dll
    .dll windows:6 windows x86 arch:x86

    6ac836ef506e7cc9eaefe56396fdbf03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcap32.dll
    .dll windows:6 windows x86 arch:x86

    07563059a9fcc58956360db5d7cbd00f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcap64.dll
    .dll windows:6 windows x64 arch:x64

    cf24cb0da9f9b84850253a61b2e0eecd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdfix.exe
    .exe windows:6 windows x86 arch:x86

    9f6f69d32274bdc8775c5da2cbf64e0f


    Code Sign

    Headers

    Imports

    Sections

  • data/camera.wav
  • data/effects.dat
  • data/language.dat
  • data/sample.png
    .png
  • data/skin.dat
    .zip
  • ___webcam_screen.png
    .png
  • bdcam_icon.png
    .png
  • body_bg.png
    .png
  • body_bg2.png
    .png
  • bottom_bg.png
    .png
  • btn_capture.png
    .png
  • btn_capture_2.png
    .png
  • btn_check.png
    .png
  • btn_click.png
    .png
  • btn_close.png
    .png
  • btn_device.png
    .png
  • btn_device_2.png
    .png
  • btn_directx.png
    .png
  • btn_directx_2.png
    .png
  • btn_fps_check.png
    .png
  • btn_fps_uncheck.png
    .png
  • btn_help.png
    .png
  • btn_key.png
    .png
  • btn_minimize.png
    .png
  • btn_open.png
    .png
  • btn_pause.png
    .png
  • btn_pause_2.png
    .png
  • btn_record.png
    .png
  • btn_record_2.png
    .png
  • btn_rectangle.png
    .png
  • btn_rectangle_2.png
    .png
  • btn_setting.png
    .png
  • btn_setting_2.png
    .png
  • btn_settingmenu.png
    .png
  • btn_sort.png
    .png
  • btn_tab.png
    .png
  • btn_tips.png
    .png
  • btn_tray.png
    .png
  • btn_uncheck.png
    .png
  • device/btn_close.png
    .png
  • device/btn_img_start.png
    .png
  • device/btn_img_stop.png
    .png
  • device/btn_menu.png
    .png
  • device/btn_rec_pause.png
    .png
  • device/btn_rec_paused.png
    .png
  • device/btn_rec_start.png
    .png
  • device/btn_rec_stop.png
    .png
  • device/btn_settings.png
    .png
  • device/btn_volume_0.png
    .png
  • device/btn_volume_1.png
    .png
  • device/btn_volume_2.png
    .png
  • device/btn_volume_3.png
    .png
  • device/client.png
    .png
  • device/client2.png
    .png
  • device/device.xml
  • device/device_connect.png
    .png
  • device/device_intro.png
    .png
  • device/video.xml
  • device/volume_knob.png
    .png
  • device/volume_slider_off.png
    .png
  • device/volume_slider_on.png
    .png
  • folder.png
    .png
  • fps_bg.png
    .png
  • info_bg.png
    .png
  • leftside_bg.png
    .png
  • logo.png
    .png
  • page_about.xml
  • page_fps.xml
  • page_general.xml
  • page_image.xml
  • page_outputs.xml
  • page_video.xml
  • prog_volume.png
    .png
  • prog_volume_bg.png
    .png
  • rightside_bg.png
    .png
  • setting_background.png
    .png
  • setting_bg.png
    .png
  • setting_tab_bg.png
    .png
  • skin.xml
  • slider_bkgnd_tile.png
    .png
  • slider_var_knob.png
    .png
  • target/btn_close.png
    .png
  • target/btn_findwindow.png
    .png
  • target/btn_fullscreen.png
    .png
  • target/btn_img_start.png
    .png
  • target/btn_img_stop.png
    .png
  • target/btn_menu.png
    .png
  • target/btn_minimize.png
    .png
  • target/btn_pen_start.png
    .png
  • target/btn_pen_stop.png
    .png
  • target/btn_rec_pause.png
    .png
  • target/btn_rec_paused.png
    .png
  • target/btn_rec_start.png
    .png
  • target/btn_rec_stop.png
    .png
  • target/btn_restore.png
    .png
  • target/btn_sel_color.png
    .png
  • target/btn_sel_line.png
    .png
  • target/btn_targetsize.png
    .png
  • target/btn_tools_box.png
    .png
  • target/btn_tools_eraser.png
    .png
  • target/btn_tools_eraser_2.png
    .png
  • target/btn_tools_exit.png
    .png
  • target/btn_tools_pen.png
    .png
  • target/btn_tools_pen_hl.png
    .png
  • target/btn_tools_redo.png
    .png
  • target/btn_tools_undo.png
    .png
  • target/client.png
    .png
  • target/client2.png
    .png
  • target/drawing_tools.xml
  • target/rect.xml
  • target/tool_bg.png
    .png
  • target/tool_bg2.png
    .png
  • tips_bg.png
    .png
  • webcam_screen.png
    .png
  • lang/Arabic.ini
  • lang/Armenian.ini
  • lang/Azerbaijani.ini
  • lang/Bosnian.ini
  • lang/Bulgarian.ini
  • lang/Croatian.ini
  • lang/Czech.ini
  • lang/Danish.ini
  • lang/Dutch.ini
  • lang/English.ini
  • lang/Farsi.ini
  • lang/Finnish.ini
  • lang/French.ini
  • lang/Georgian.ini
  • lang/German.ini
  • lang/Greek.ini
  • lang/Hebrew.ini
  • lang/Hungarian.ini
  • lang/Indonesian.ini
  • lang/Italian.ini
  • lang/Japanese.ini
    .ps1
  • lang/Kurdish.ini
  • lang/Latvian.ini
  • lang/Lithuanian.ini
  • lang/Malay.ini
  • lang/Norwegian.ini
  • lang/Polish.ini
  • lang/Portuguese(BR).ini
  • lang/Portuguese.ini
  • lang/Romanian.ini
  • lang/Russian.ini
  • lang/Serbian(Cyrillic).ini
  • lang/Serbian.ini
  • lang/Simplified_Chinese.ini
  • lang/Slovak.ini
  • lang/Slovenian.ini
  • lang/Spanish.ini
  • lang/Swedish.ini
  • lang/Thai.ini
  • lang/Traditional_Chinese.ini
  • lang/Turkish.ini
  • lang/Ukrainian.ini
  • lang/Urdu.ini
  • lang/Uzbek.ini
  • lang/Vietnamese.ini
  • translators.txt
  • Bandicam/file_id.diz
  • Bandicam/keymaker.exe
    .exe windows:4 windows x86 arch:x86

    820ab24e53af2dbafc74d24f87e40262


    Headers

    Imports

    Sections

  • Bandicam/maze.nfo