General

  • Target

    66e190e6dc1d577ecce69784def99e21_JaffaCakes118

  • Size

    350KB

  • MD5

    66e190e6dc1d577ecce69784def99e21

  • SHA1

    3dad36eebf757ab4992951afd06bf7f56797e0cf

  • SHA256

    0fcc9b0571229c5c88c698d60e36fdd982d94c56ad3f4ea24ae8b55ee25fa0b0

  • SHA512

    6d696de937b1bbed8d45f69a2a4b874b5bfa776c8accea0afdb37143f95e017e443676c047babdac1dc36a378939c5da0cecc731fcea0515aefaeed03094cb51

  • SSDEEP

    6144:ysv7FtuRLH7gmSTXVVVXqo+B1iOYREhB1U6i4J/U/0o0:9zuRbEmGVX3+B1iOGMOMJ/U/50

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 66e190e6dc1d577ecce69784def99e21_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/DlgHost.dll
    .dll windows:4 windows x86 arch:x86

    502ba7296e72d77bbd3a08bba88ca13d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FM_tb.bmp
  • $PLUGINSDIR/FMlic.txt
  • $PLUGINSDIR/IM_tb.bmp
  • $PLUGINSDIR/IMlic.txt
  • $PLUGINSDIR/KDB_tb.bmp
  • $PLUGINSDIR/KDY_tb.bmp
  • $PLUGINSDIR/MSB_1.bmp
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SIMY_1.bmp
  • $PLUGINSDIR/SIMlic.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WS_tb.bmp
  • $PLUGINSDIR/Yahoo_tb.bmp
  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/accept_disabled.bmp
  • $PLUGINSDIR/agree.bmp
  • $PLUGINSDIR/agreecontinue.bmp
  • $PLUGINSDIR/bab_tiny.bmp
  • $PLUGINSDIR/back.bmp
  • $PLUGINSDIR/back_dis.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/continue.bmp
  • $PLUGINSDIR/continue_dis.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/disagree.bmp
  • $PLUGINSDIR/exit.bmp
  • $PLUGINSDIR/gen_tb.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/load_1.bmp
  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/next_dis.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:6 windows x86 arch:x86

    8c822ac3e4d332dd16e1002a92e3c264


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/popwarning.bmp
  • $PLUGINSDIR/popwindow.bmp
  • $PLUGINSDIR/popwindow_close.bmp
  • $PLUGINSDIR/sIM.bmp
  • $PLUGINSDIR/side.bmp
  • $PLUGINSDIR/simask-tb.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/yontoo.bmp
  • $PROGRAMFILES/hdvidcodec.com/$PROGRAMFILES/hdvidcodec.com/uninst.exe.nsis
  • $PROGRAMFILES/hdvidcodec.com/FinishHDVID.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $EXEDIR/b.bmp
  • $EXEDIR/finish.bmp
  • $EXEDIR/hdvid_temp.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections