General

  • Target

    fd8899e1c01356d6fd70cc090489b658_JaffaCakes118

  • Size

    840KB

  • MD5

    fd8899e1c01356d6fd70cc090489b658

  • SHA1

    524fafd6ae9dd7fdd795468793c851bb6bca12d7

  • SHA256

    8c4484b11d13d229d351deaab51e18a4114eb63a8e1ab1831fc789386b9349a5

  • SHA512

    45c94be1f1410e6c39a79da55a2a07a135eaa7990f830fbe1c9685e71b26479a197a002e72eb4807bf478adcf74ab9dbc2f762c5776debda992ee4f9f640c5a7

  • SSDEEP

    24576:SnwRwU3UXu5Hs4BTqLVx3tHGkEPWlQN/XFXA7ui9wn:IHzosjZxdHGkEPWlC/XFXA0n

Score
3/10

Malware Config

Signatures

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • fd8899e1c01356d6fd70cc090489b658_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLDownLoader.dll
    .dll windows:4 windows x86 arch:x86

    2be5c75b54508e5f9ce230cd7d1c100a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExAddPage.dll
    .dll windows:4 windows x86 arch:x86

    a31423df96accd7f6a5fcbbc3f31973a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FILEDownPlug.dll
    .dll windows:4 windows x86 arch:x86

    6de7e665949d01730498664eca6dc12b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IsVista.dll
    .dll windows:4 windows x86 arch:x86

    efa700f367af492674a29b601d27bd91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ischeck.dll
    .dll windows:4 windows x86 arch:x86

    251a9619bbd921d60321154c493fcc9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LiveChk.dll
    .dll windows:4 windows x86 arch:x86

    61d7250d1f0e49e7d8f5ab4e906c3bf3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserMgr.dll
    .dll windows:4 windows x86 arch:x86

    bac2b3d4a0df9a23aee940b8ecd0d168


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ancameralicense3_5.txt
  • $PLUGINSDIR/installoption.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stack.dll
    .dll windows:4 windows x86 arch:x86

    55ae76a2cfe164921f566c03cfbba5ec


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ancamera.xml
    .xml
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWeb.dll
    .dll windows:4 windows x86 arch:x86

    61446fa96910e14a6424d0f281c759eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ancamera3.exe
    .exe windows:4 windows x86 arch:x86

    ee60b3637fdd368466bcc67c02589c3f


    Headers

    Imports

    Exports

    Sections

  • ancameraup.exe
    .exe windows:4 windows x86 arch:x86

    92312a1435053e68a4039ae813453592


    Headers

    Imports

    Sections