General

  • Target

    3bdd602693f225d251e6b47d908a245f_JaffaCakes118

  • Size

    4.0MB

  • MD5

    3bdd602693f225d251e6b47d908a245f

  • SHA1

    63be90abe4e6a99c8be860cdbc099ac9f54db4fd

  • SHA256

    79ae14d993fdfc363514fada8e1aebe71eaf0ef8d80901ac2cf3cfc7e02c8c30

  • SHA512

    cef12fe61bae06c866c5ff49d4f2f46da5f6e5a7163dabe3e66bdcd5d9841a87240eae46c161a395c6708fa572302b3e200ce018d26350b8a948ed2e7662b007

  • SSDEEP

    98304:R+jottIc6ZPPaBD2bJOJNXW/MfNpcSv1eo/srOCDoMJQ9mzF:R7NeaBwM18Kv1eo/srZD7QS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 3bdd602693f225d251e6b47d908a245f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • 3g2.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 3g2plus.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 3gp.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 3gpplus.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FFF.NFO
  • Language/Chinese_Simplified.uni
  • Language/Traditional Chinese.uni
  • Language/english.uni
  • Microsoft.VC90.CRT.manifest
    .xml
  • aac.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aacplus.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • acdbase.dll
    .dll windows:5 windows x86 arch:x86

    06f79f412dc41be9a29639e0689c655b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adpcm.dll
    .dll windows:5 windows x86 arch:x86

    31d9b983dd6b65ab4202d2cbf63ceab4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aiff.dll
    .dll windows:5 windows x86 arch:x86

    52f17366be3a3e38325f109d26938a96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • alac.dll
    .dll windows:5 windows x86 arch:x86

    2415e39d9ee17421df8520d60061cdc4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ct.dll
    .dll windows:5 windows x86 arch:x86

    2ca080c1eda0b2912a720e76d218f7be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoder_ape.dll
    .dll windows:5 windows x86 arch:x86

    d316a6f3c7947cfe3b4441d9c4f67ea1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoder_flac.dll
    .dll windows:5 windows x86 arch:x86

    b697eb81915e44f78c1b7e0d410897c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoder_mp4.dll
    .dll windows:5 windows x86 arch:x86

    e68ad702434779a4d3912560390e6ec9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoder_mpc.dll
    .dll windows:5 windows x86 arch:x86

    2c3a5a5bf33870dea2cad7ce68caae60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoder_ogg.dll
    .dll windows:5 windows x86 arch:x86

    182be7fc708c4c6896cd2dc80ca51159


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoder_wma.dll
    .dll windows:5 windows x86 arch:x86

    97e352681512a89b4ce4779228624d90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • decoder_wv.dll
    .dll windows:5 windows x86 arch:x86

    142452c70f2088ce8f0e152de0d9596e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezcddax.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ezcddax32.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    adcdbe8ee6f3b0bfc564279e25f36923


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezcddax64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    635b5ac89c925adcbfa033411a8846b4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flac.dll
    .dll windows:5 windows x86 arch:x86

    6efa4f860ac68d1989ca76e029771fdc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • id3lib.dll
    .dll windows:5 windows x86 arch:x86

    57e42f5965424039f2bcbe3aa19ed9d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lame.dll
    .dll windows:5 windows x86 arch:x86

    2f135b78a4839a8c8c3c01706f46df1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • m4a.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • m4aplus.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • m4b.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • monkey.dll
    .dll windows:5 windows x86 arch:x86

    de61760d678f52fd8fb975fab1650726


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mp4.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mp4plus.dll
    .dll windows:5 windows x86 arch:x86

    d6f4918809a7462394a45b5437e7ec76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • musepack.dll
    .dll windows:5 windows x86 arch:x86

    deb15fb5439557d5d010bcb521683f79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • notify.wav
  • ntaspi32.dll
    .dll windows:5 windows x86 arch:x86

    1091f723823a43ea88d4644fdd319484


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ogg.dll
    .dll windows:5 windows x86 arch:x86

    3ec9f360d8bd222ec493865c791b8acc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pcm.dll
    .dll windows:5 windows x86 arch:x86

    b3836d76610c60f93cd4c10ab16e7bd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pcmdual.dll
    .dll windows:5 windows x86 arch:x86

    0ee4dadbd023c0c8c91c1a8b6ed9dd5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • register32.exe
    .exe windows:5 windows x86 arch:x86

    5d001a4afba8ee64b3dbf0eeec6de605


    Code Sign

    Headers

    Imports

    Sections

  • register64.exe
    .exe windows:5 windows x64 arch:x64

    5d001a4afba8ee64b3dbf0eeec6de605


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • waveout.dll
    .dll windows:5 windows x86 arch:x86

    59cd86de179be14b479801ed306ea31b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wavpack.dll
    .dll windows:5 windows x86 arch:x86

    c5c8c31c8178eff30fed3540d90635aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wma9.dll
    .dll windows:5 windows x86 arch:x86

    34ce92ca7e490e48b6e8e140f2f49b71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wma91.dll
    .dll windows:5 windows x86 arch:x86

    34ce92ca7e490e48b6e8e140f2f49b71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wma92.dll
    .dll windows:5 windows x86 arch:x86

    34ce92ca7e490e48b6e8e140f2f49b71


    Code Sign

    Headers

    Imports

    Exports

    Sections