General

  • Target

    077b6181ea045c2cfb6537885bce85d0_JaffaCakes118

  • Size

    358KB

  • MD5

    077b6181ea045c2cfb6537885bce85d0

  • SHA1

    0c84ed543b5c7016515983433d47ee3a929fb12a

  • SHA256

    11f005f7b620ad4755624e9b68c26ddd36453276ea65e47a443db9944d8ebc53

  • SHA512

    06c8afad0cb209179c9905111e072b8985d244c7226f06a978e30b05aefb4271637fc3a6b187df3a74a60b828a8ea02aa3eca752766f0c3f0d58ea55a649c614

  • SSDEEP

    6144:lsv7Fs/n2XCq2iYt/g277gVslCf6tiNzzvEi+YlWSN28FSOmhJy6E2:QO/IT2jcswf6tEzzD+iXzuy6E2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 077b6181ea045c2cfb6537885bce85d0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/DlgHost.dll
    .dll windows:4 windows x86 arch:x86

    502ba7296e72d77bbd3a08bba88ca13d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FM_tb.bmp
  • $PLUGINSDIR/FMlic.txt
  • $PLUGINSDIR/IM_tb.bmp
  • $PLUGINSDIR/IMlic.txt
  • $PLUGINSDIR/KDB_tb.bmp
  • $PLUGINSDIR/KDY_tb.bmp
  • $PLUGINSDIR/MSB_1.bmp
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SIMY_1.bmp
  • $PLUGINSDIR/SIMlic.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WS_tb.bmp
  • $PLUGINSDIR/Yahoo_tb.bmp
  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/accept_disabled.bmp
  • $PLUGINSDIR/agree.bmp
  • $PLUGINSDIR/agreecontinue.bmp
  • $PLUGINSDIR/bab_tiny.bmp
  • $PLUGINSDIR/back.bmp
  • $PLUGINSDIR/back_dis.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/continue.bmp
  • $PLUGINSDIR/continue_dis.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/disagree.bmp
  • $PLUGINSDIR/exit.bmp
  • $PLUGINSDIR/gen_tb.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/load_1.bmp
  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/next_dis.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:6 windows x86 arch:x86

    8c822ac3e4d332dd16e1002a92e3c264


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/popwarning.bmp
  • $PLUGINSDIR/popwindow.bmp
  • $PLUGINSDIR/popwindow_close.bmp
  • $PLUGINSDIR/sIM.bmp
  • $PLUGINSDIR/sIMlica.txt
  • $PLUGINSDIR/side.bmp
  • $PLUGINSDIR/simask-tb.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/yontoo.bmp
  • $PROGRAMFILES/hdvidcodec.com/$PROGRAMFILES/hdvidcodec.com/uninst.exe.nsis
  • $PROGRAMFILES/hdvidcodec.com/FinishHDVID.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $EXEDIR/b.bmp
  • $EXEDIR/finish.bmp
  • $EXEDIR/hdvid_temp.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections