General

  • Target

    f5f1d72a4ea915670ed8ec16dcb09fef_JaffaCakes118

  • Size

    3.2MB

  • MD5

    f5f1d72a4ea915670ed8ec16dcb09fef

  • SHA1

    26698829e22123a9bde1b697abad0ca66006eb40

  • SHA256

    1a25633f579020dd1f2c14714725b3395d03a44c9cf5130a46233a9a360f06b4

  • SHA512

    f72b89a7fed33e3bcafc8378f6a2a09e91caac281ad12d8fd69e58541b987e5a938bc7f7bfcb9dbdee38bbedebd1a60e45c34b0051a5cfeeb9f4f80474c2b455

  • SSDEEP

    98304:mQENaw+pCrV9iYe9pTK5WFZEtEXpLtCeAbMIJzq/OFXAPf8+2K:2TsYKeyZEtEXjdId+OFqDJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f5f1d72a4ea915670ed8ec16dcb09fef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CustomPageDirectory.ini
  • $PLUGINSDIR/CustomPageFinish.ini
  • $PLUGINSDIR/DLLActiveOnConnect.dll
    .dll windows:4 windows x86 arch:x86

    610bd696e1da38da5d7bbb5def21c5fb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FRNDelete.dll
    .dll windows:4 windows x86 arch:x86

    eacc283400b4c9fd7e2c19bddba71711


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MacAddress.dll
    .dll windows:4 windows x86 arch:x86

    1945619be5adba52f127455947d1ec4e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $SYSDIR/ActiveOnBannerAX.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    af567eb5030cce1e623047daa94b3b6c


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/ActiveOnWebUninstallAX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    47b590c24b31c86b59bc9c1a2712736e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/Uninstall.exe.nsis
  • ActiveOn.exe
    .exe windows:5 windows x86 arch:x86

    1a5d994808c9f125c62fa016fbf14887


    Headers

    Imports

    Sections

  • ActiveOnBannerAX.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    af567eb5030cce1e623047daa94b3b6c


    Headers

    Imports

    Exports

    Sections

  • ActiveOnWebUninstallAX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    47b590c24b31c86b59bc9c1a2712736e


    Headers

    Imports

    Exports

    Sections

  • InstallEndDlg.exe
    .exe windows:5 windows x86 arch:x86

    ef1c2e82424d742b1335efcbc0662f28


    Headers

    Imports

    Sections

  • InstallStartDlg.exe
    .exe windows:5 windows x86 arch:x86

    3c001d33915592b505fd44bab3baa5e1


    Headers

    Imports

    Sections

  • PointMall.ico
  • agree.txt
  • ding.wav
  • image/loading.htm
    .html
  • image/loading.swf
  • lotto_vista.ico
  • lotto_xp.ico
  • zeroauction.ico