General

  • Target

    37fedd906bddb83f4aabf934d5732d3a_JaffaCakes118

  • Size

    12.5MB

  • MD5

    37fedd906bddb83f4aabf934d5732d3a

  • SHA1

    c0301ac77800c71eca495017a64c0dd76e3e15f5

  • SHA256

    e832e5bc4871b28334000d41d805df2d1608dd6157bf652cbf5d2d1dd497b4bf

  • SHA512

    e1a5cb5f954457f41e23069b93c8955ff43d46e149f7494b91ecebd27f64e5d09f79964dfb284f5936c6681f44c157b0b4b9bd0fb5a7b4f31dd7fb10f20d08c7

  • SSDEEP

    196608:GS5lYG4xyTiOr98lsKGI0yQN/e+FGjtfNbkN4rUOx4c4gwf9jheAx3YmJcpom+Br:GgBexOri10yiVcZfFWaxz4z9jUAzJg69

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 37fedd906bddb83f4aabf934d5732d3a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $TEMP/setup.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $4/Nik Software/Viveza 2/Viveza2.config
    .xml
  • $PLUGINSDIR/AddFolder.ico
  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • Viveza 2/Check.exe
    .exe windows:5 windows x86 arch:x86

    43e3db2ca7d91d131c273d14f6a8f6e0


    Headers

    Imports

    Exports

    Sections

  • Viveza 2/License.rtf
    .rtf
  • Viveza 2/Uninstall Viveza 2.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • Viveza 2/Viveza 2 (64-Bit)/Viveza2.8bf
    .dll windows:5 windows x64 arch:x64

    65b596804afbce1cfc03f91f9134f9dc


    Headers

    Imports

    Exports

    Sections

  • Viveza 2/Viveza 2.exe
    .exe windows:5 windows x86 arch:x86

    2c04f9b532bd7c7cf14482b28f7912dd


    Headers

    Imports

    Exports

    Sections

  • Viveza 2/Viveza2.8bf
    .dll windows:5 windows x86 arch:x86

    88489251903fcb261c8232bc1d4253c5


    Headers

    Imports

    Exports

    Sections

  • Viveza 2/Viveza2.config
    .xml
  • $TEMP/svhost.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_1_.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $SYSDIR/$_5_
    .dll regsvr32 windows:5 windows x86 arch:x86

    1ee90ed44c02f5ae73c9e75c3ab7820a


    Headers

    Imports

    Exports

    Sections