General

  • Target

    3be150332b866d5b0e992dd693b0d68c_JaffaCakes118

  • Size

    4.2MB

  • MD5

    3be150332b866d5b0e992dd693b0d68c

  • SHA1

    0ac3f082fa8ec5333b5748360abd184c92176238

  • SHA256

    b7aed4f7f0c27cbe22966fded738612f5f251c8a99d4763e52053e35e36f4ea8

  • SHA512

    8b43e879d09196342497a8190aec389bb55f28e827bb5eb9cd1f6a8c565ee04def0f9339057d41651806144f2765b0aad8a229ee690d78c241c4edf32320fbbf

  • SSDEEP

    98304:NbIO8GtJKd2E5So9dS0kG39KNgYyM63aSRwIOOzVCjwCi3g:NEO8SaDQRSh3WDw4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 42 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 3be150332b866d5b0e992dd693b0d68c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $APPDATA/114la.ico
  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • Program/BugReport.dll
    .dll windows:4 windows x86 arch:x86

    5f6b2090be1c9106d8e83a62f2aa9396


    Headers

    Imports

    Exports

    Sections

  • Program/BugReport.exe
    .exe windows:5 windows x86 arch:x86

    f62928cec46742a36a3ea7a332a907d4


    Headers

    Imports

    Sections

  • Program/CombineFlv.exe
    .exe windows:4 windows x86 arch:x86

    e7952e17443709581dbddfecdd2166e0


    Headers

    Imports

    Sections

  • Program/CoolDown.exe
    .exe windows:4 windows x86 arch:x86

    b0990f41b7e70b272b7cbf043e4935d2


    Headers

    Imports

    Sections

  • Program/CoolDown_Engine.dll
    .dll windows:4 windows x86 arch:x86

    aadfd1abfcffbf6954a2b52cd7a972ea


    Headers

    Imports

    Exports

    Sections

  • Program/CoolSee.exe
    .exe windows:4 windows x86 arch:x86

    d17473a1d6386959ad921337ebb0a303


    Headers

    Imports

    Sections

  • Program/CoolSee.ico
  • Program/CoolSee.swf
  • Program/DLL.dll
    .dll windows:4 windows x86 arch:x86

    3a874585a1ebd9299d00ff01d03cbfe4


    Headers

    Imports

    Sections

  • Program/Debugger.ini
  • Program/FlvTool.dll
    .dll windows:4 windows x86 arch:x86

    f9f0a3e71f32ec7e7f67afefc7d3f1be


    Headers

    Imports

    Exports

    Sections

  • Program/GetUrl.htm
    .html .js polyglot
  • Program/LevinAbs.dll
    .dll windows:4 windows x86 arch:x86

    82946324efae0918f9a2aef7d1fd21e4


    Headers

    Imports

    Exports

    Sections

  • Program/LevinCore.dll
    .dll windows:4 windows x86 arch:x86

    5c4a483d38a55b67b837f328f577bd3f


    Headers

    Imports

    Exports

    Sections

  • Program/LevinCore.exe
    .exe windows:4 windows x86 arch:x86

    b7a0f89a298600dddc202de19b85f9f9


    Headers

    Imports

    Sections

  • Program/MP4Core.exe
    .exe windows:4 windows x86 arch:x86

    54a506a43e4273fc1a030707c2f8b5ea


    Headers

    Imports

    Sections

  • Program/OnMetaF.dll
    .dll windows:4 windows x86 arch:x86

    9244a4cc81873d1e567aa1784fe7a1d3


    Headers

    Imports

    Exports

    Sections

  • Program/Player_pl.dll
    .dll windows:4 windows x86 arch:x86

    ed182460519da37b6473ed965bc4ac56


    Headers

    Imports

    Sections

  • Program/RayAM.exe
    .exe windows:4 windows x86 arch:x86

    c8cec539808cf17c0e46a02ad05b9995


    Headers

    Imports

    Sections

  • Program/RayConfig.ini
  • Program/RaySpy.exe
    .exe windows:4 windows x86 arch:x86

    15f3878eeb21e96a17c563fa4ae5de1e


    Headers

    Imports

    Sections

  • Program/RaySpyCore.dll
    .dll windows:4 windows x86 arch:x86

    a81e26c2857b9019c9db337551dc92b1


    Headers

    Imports

    Exports

    Sections

  • Program/SetUpHelper.exe
    .exe windows:4 windows x86 arch:x86

    716eb7caec90704f8b956005911442d7


    Headers

    Imports

    Sections

  • Program/SkinMagicTrial.dll
    .dll windows:4 windows x86 arch:x86

    c8df08117592a75e9bc7e503b953168e


    Headers

    Imports

    Exports

    Sections

  • Program/Version.xml
    .xml
  • Program/ad/coolsee_text_ad.xml
    .xml
  • Program/ad/down_ad.swf
  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • Program/get_list_info.dll
    .dll windows:4 windows x86 arch:x86

    9fba457446af05b9eb1e563ca433746c


    Headers

    Imports

    Exports

    Sections

  • Program/js32.dll
    .dll windows:4 windows x86 arch:x86

    8a4081abc2c833f164926e41bfa8b681


    Headers

    Imports

    Exports

    Sections

  • Program/levin.dll
    .dll windows:4 windows x86 arch:x86

    0a0e59ea0f5c62ec550670027347ef54


    Headers

    Imports

    Sections

  • Program/levin_cdn.dll
    .dll windows:4 windows x86 arch:x86

    366176641e788e72f8e485887de252eb


    Headers

    Imports

    Exports

    Sections

  • Program/levin_hpr.dll
    .dll windows:4 windows x86 arch:x86

    387a741eda3b268e7c3892a7ee427342


    Headers

    Imports

    Sections

  • Program/levinier.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0161105552d54f2883328471ba716f0c


    Headers

    Imports

    Exports

    Sections

  • Program/media/download.wav
  • Program/media/searching.gif
    .gif
  • Program/mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • Program/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • Program/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Program/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Program/rank.xml
    .xml
  • Program/search_lib.dll
    .dll windows:4 windows x86 arch:x86

    66a2c2ea5c552166b9a763365c2dbc23


    Headers

    Imports

    Exports

    Sections

  • Program/search_site.xml
    .xml
  • Program/stlport_vc646.dll
    .dll windows:4 windows x86 arch:x86

    b1603c3e1c5acc291efe3235cc214391


    Headers

    Imports

    Exports

    Sections

  • Program/swf_profile.xml
    .xml
  • RayDown.exe
    .exe windows:4 windows x86 arch:x86

    c2672e0a9c018d0160de23d96244befd


    Headers

    Imports

    Sections

  • Uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections