General

  • Target

    56fc58cea8bd27e00fcf0ec7286eb25b_JaffaCakes118

  • Size

    693KB

  • MD5

    56fc58cea8bd27e00fcf0ec7286eb25b

  • SHA1

    8eeefff96e854ff47748bd665a30b5d271df0483

  • SHA256

    dbf107ccc9e9f14c0d420fad3d5e8f90e2b0b80ab25a2695282f6209653c4ab8

  • SHA512

    b41249e690c8a3aeb6438d5a80b7b6e22fedfbc90738a7c1db08389558c532893cd1e247c8349f0ddf2c32b79687e0b8253d7019e9ce5d72d2c66520d88d326c

  • SSDEEP

    12288:neEEfxxCYYkQ4g1frYAaHZiwDJUZZnWS23WnQDomIQF3EpI4Z4X10GVWA:nz0xCYQaHLuZZfzQk2wIY4ZYA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 56fc58cea8bd27e00fcf0ec7286eb25b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    80686d0ea5c37412830430f56f2823c2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ServiceBlock.dll
    .dll windows:4 windows x86 arch:x86

    9ddcd4becdc8a819fcb11c1bcd3728e2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • C:/WINDOWS/system32/drivers/showpop.sys
    .sys windows:4 windows x86 arch:x86

    877556a274fdb9b6883e90ef317d2a8d


    Headers

    Imports

    Sections

  • C:/WINDOWS/system32/drivers/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ServiceBlock.dll
    .dll windows:4 windows x86 arch:x86

    9ddcd4becdc8a819fcb11c1bcd3728e2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
  • OhOhPopup.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6d0b813165e93e08d0eb07ba8080210c


    Headers

    Imports

    Exports

    Sections

  • ShowLib.dll
    .dll windows:4 windows x86 arch:x86

    0e29ed10c8b59fd12d569b8999df8309


    Headers

    Imports

    Exports

    Sections

  • ShowLib.dll.intermediate.manifest
    .xml
  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • ohohpopup.exe
    .exe windows:4 windows x86 arch:x86

    3ace0a06e12460e39e58d10fc804e226


    Headers

    Imports

    Sections

  • ohohpopup.exe.intermediate.manifest
    .xml
  • showpop.sys
    .sys windows:4 windows x86 arch:x86

    877556a274fdb9b6883e90ef317d2a8d


    Headers

    Imports

    Sections