General

  • Target

    8275337624b2c795196952c0ef0f22d1_JaffaCakes118

  • Size

    4.9MB

  • MD5

    8275337624b2c795196952c0ef0f22d1

  • SHA1

    428eb0782db702dec199a4e94612503ca3725494

  • SHA256

    462ef03cb4d341042bf3b9c81b3a61cadaaea78e892ecd005bb83627e70c52d5

  • SHA512

    7f8a3078b0cd6ee8f5bcedf9aef23752fe426e2d8a8c3776ad1fccb9701a8e4a0028f8e793b27e00329ec07f1258e0fd0bd8f54e65cda2813c34407777049762

  • SSDEEP

    98304:Cd3XojrQtXI4df9JboClUu9ryj9+9EkCiceJ3oVD2ULJA4znVoW:aojJ4/+MUEAkCic62DVVnVZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 46 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 8275337624b2c795196952c0ef0f22d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    55f3dfd13c0557d3e32bcbc604441dd3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ServiceBlock.dll
    .dll windows:4 windows x86 arch:x86

    4df004908141990e14e24741df59afe8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/ff_vfw.dll
    .dll windows:4 windows x86 arch:x86

    d01523ec21c763fcdd3e9d781afd93ea


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/ff_vfw.dll.manifest
    .xml
  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/cfcodecdelete.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FRNDelete.dll
    .dll windows:4 windows x86 arch:x86

    eacc283400b4c9fd7e2c19bddba71711


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ServiceBlock.dll
    .dll windows:4 windows x86 arch:x86

    4df004908141990e14e24741df59afe8


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ffdshow.reg
  • $TEMP/ffdshow1.reg
  • $_6_/divx5/DivX.dll
    .dll windows:4 windows x86 arch:x86

    8531e4c2cf422a9ddfd77f246dc1f63a


    Headers

    Imports

    Exports

    Sections

  • $_6_/divx5/PSIKey.dll
    .dll windows:4 windows x86 arch:x86

    166797b2b7638b5affc0e5b7b590f2b8


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/FLT_ffdshow.dll
    .dll windows:4 windows x86 arch:x86

    ac97f9507bec2d17cf8f3d0c4b38082b


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/Microsoft.VC80.CRT.manifest
  • $_6_/ffdshow/TomsMoComp_ff.dll
    .dll windows:4 windows x86 arch:x86

    465bae6f81d069a0b3a30d2464761039


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/WinCPUID.dll
    .dll windows:4 windows x86 arch:x86

    9351685d49de08f059f54d8dd7410a82


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/audxlib.dll
    .dll windows:4 windows x86 arch:x86

    ec7597b6c8ca3c0303a584006fdebc9f


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/custom matrices/Bulletproof's Heavy Compression Matrix.TXT
  • $_6_/ffdshow/custom matrices/Bulletproof's Heavy Compression Matrix.xcm
  • $_6_/ffdshow/custom matrices/Bulletproof's High Quality Matrix.TXT
  • $_6_/ffdshow/custom matrices/Bulletproof's High Quality Matrix.xcm
  • $_6_/ffdshow/custom matrices/CG-Animation Matrix.txt
  • $_6_/ffdshow/custom matrices/CG-Animation Matrix.xcm
  • $_6_/ffdshow/custom matrices/Low Bitrate Matrix.txt
  • $_6_/ffdshow/custom matrices/Low Bitrate Matrix.xcm
  • $_6_/ffdshow/custom matrices/MPEG.txt
  • $_6_/ffdshow/custom matrices/MPEG.xcm
  • $_6_/ffdshow/custom matrices/Soulhunters V3.xcm
  • $_6_/ffdshow/custom matrices/Soulhunters V5.xcm
  • $_6_/ffdshow/custom matrices/Standard.txt
  • $_6_/ffdshow/custom matrices/Standard.xcm
  • $_6_/ffdshow/custom matrices/Ultimate Matrix.txt
  • $_6_/ffdshow/custom matrices/Ultimate Matrix.xcm
  • $_6_/ffdshow/custom matrices/Ultra Low Bitrate Matrix.txt
  • $_6_/ffdshow/custom matrices/Ultra Low Bitrate Matrix.xcm
  • $_6_/ffdshow/custom matrices/Very Low Bitrate Matrix.txt
  • $_6_/ffdshow/custom matrices/Very Low Bitrate Matrix.xcm
  • $_6_/ffdshow/custom matrices/andreas_78er.matrix.txt
  • $_6_/ffdshow/custom matrices/andreas_78er.matrix.xcm
  • $_6_/ffdshow/custom matrices/andreas_doppelte_99er.matrix.txt
  • $_6_/ffdshow/custom matrices/andreas_doppelte_99er.matrix.xcm
  • $_6_/ffdshow/custom matrices/andreas_einfache_99er.matrix.txt
  • $_6_/ffdshow/custom matrices/andreas_einfache_99er.matrix.xcm
  • $_6_/ffdshow/custom matrices/eqm_autogk_sharp.xcm
  • $_6_/ffdshow/custom matrices/eqm_avc_hr.cfg
  • $_6_/ffdshow/custom matrices/eqm_v1.xcm
  • $_6_/ffdshow/custom matrices/eqm_v3ehr.xcm
  • $_6_/ffdshow/custom matrices/eqm_v3hr.xcm
  • $_6_/ffdshow/custom matrices/eqm_v3lr.xcm
  • $_6_/ffdshow/custom matrices/eqm_v3uhr_rev2.xcm
  • $_6_/ffdshow/custom matrices/eqm_v3ulr_rev3.xcm
  • $_6_/ffdshow/custom matrices/hvs-best-picture.txt
  • $_6_/ffdshow/custom matrices/hvs-best-picture.xcm
  • $_6_/ffdshow/custom matrices/hvs-better-picture.txt
  • $_6_/ffdshow/custom matrices/hvs-better-picture.xcm
  • $_6_/ffdshow/custom matrices/hvs-good-picture.txt
  • $_6_/ffdshow/custom matrices/hvs-good-picture.xcm
  • $_6_/ffdshow/custom matrices/pvcd.txt
  • $_6_/ffdshow/custom matrices/pvcd.xcm
  • $_6_/ffdshow/custom matrices/q_matrix.cfg
  • $_6_/ffdshow/custom matrices/q_matrix2.cfg
  • $_6_/ffdshow/custom matrices/q_matrix_def.cfg
  • $_6_/ffdshow/ffSpkCfg.dll
    .dll windows:4 windows x86 arch:x86

    8c4466dd1006da399320b6b1e7be5449


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_acm.acm
    .dll windows:4 windows x86 arch:x86

    1e772b5f4dbedfe82ad7a309072e8ee4


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_kernelDeint.dll
    .dll windows:4 windows x86 arch:x86

    ebca70f21ec37a1b10b427b9b7a74b87


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_liba52.dll
    .dll windows:4 windows x86 arch:x86

    fe8b290c9ab34f20af593da92d84644d


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_libdts.dll
    .dll windows:4 windows x86 arch:x86

    a5e8aee9013fbd27bf6932fcac568609


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_libfaad2.dll
    .dll windows:4 windows x86 arch:x86

    7bb584b5d16d712cfd75e7c24c262bc2


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_libmad.dll
    .dll windows:4 windows x86 arch:x86

    57a1b5beb3a23fa57136849deb916bd2


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_realaac.dll
    .dll windows:4 windows x86 arch:x86

    14f3abd5f4633dc096cfd6a32fc3df54


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_samplerate.dll
    .dll windows:4 windows x86 arch:x86

    446adbc79d713aff909db3f6a9477434


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_theora.dll
    .dll windows:4 windows x86 arch:x86

    629ec55a8aaf90a8275dd51d15bbd023


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_tremor.dll
    .dll windows:4 windows x86 arch:x86

    e114fc7773447d5d33ad6a965a634ffc


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_unrar.dll
    .dll windows:4 windows x86 arch:x86

    5bc81ca3fd2d25594ab28ebab1e743c0


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_vfw.dll
    .dll windows:4 windows x86 arch:x86

    d01523ec21c763fcdd3e9d781afd93ea


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_vfw.dll.manifest
    .xml
  • $_6_/ffdshow/ff_vfw32.dll.manifest
    .xml
  • $_6_/ffdshow/ff_wmv9.dll
    .dll windows:4 windows x86 arch:x86

    49943b78a05c2f2cbbd8741e67727270


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ff_x264.dll
    .dll windows:4 windows x86 arch:x86

    ea8877e870b3d9d3c56748146ac96eac


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ffavisynth.dll
    .dll windows:4 windows x86 arch:x86

    b1f82e721dbaa58e5e8a9d0374659985


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ffdshow.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    5cd2bf1b5e4ad6784b04b8f38b46197d


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/ffdshow.ax.manifest
    .xml
  • $_6_/ffdshow/ffdshow1.ico
  • $_6_/ffdshow/ffdshow2.ico
  • $_6_/ffdshow/ffdshow3.ico
  • $_6_/ffdshow/ffvdub.vdf
    .dll windows:4 windows x86 arch:x86

    61109bbf697e5d6f7f1fa31afcf05edc


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/is-ED8FP.tmp
    .dll regsvr32 windows:4 windows x86 arch:x86

    802477910872dc13ed8fede333aab68c


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/languages/ffdshow.1026.bg
  • $_6_/ffdshow/languages/ffdshow.1028.tc
  • $_6_/ffdshow/languages/ffdshow.1029.cz
  • $_6_/ffdshow/languages/ffdshow.1031.de
  • $_6_/ffdshow/languages/ffdshow.1033.en
  • $_6_/ffdshow/languages/ffdshow.1034.es
  • $_6_/ffdshow/languages/ffdshow.1036.fr
  • $_6_/ffdshow/languages/ffdshow.1038.hu
  • $_6_/ffdshow/languages/ffdshow.1040.it
  • $_6_/ffdshow/languages/ffdshow.1041.ja
  • $_6_/ffdshow/languages/ffdshow.1041.jp
  • $_6_/ffdshow/languages/ffdshow.1045.pl
  • $_6_/ffdshow/languages/ffdshow.1046.br
  • $_6_/ffdshow/languages/ffdshow.1049.ru
  • $_6_/ffdshow/languages/ffdshow.1051.sk
  • $_6_/ffdshow/languages/ffdshow.1053.se
  • $_6_/ffdshow/languages/ffdshow.2052.sc
  • $_6_/ffdshow/libavcodec.dll
    .dll windows:4 windows x86 arch:x86

    82838c60486eeb171c1c00aa274a2910


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/libmpeg2_ff.dll
    .dll windows:4 windows x86 arch:x86

    28ccd6077a1b636597eba09ebaee7338


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/libmplayer.dll
    .dll windows:4 windows x86 arch:x86

    aa8124841b5e8bbd8a79677902f1f7c6


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/makeAVIS.exe
    .exe windows:4 windows x86 arch:x86

    f8187e123ab56aac0e1b26f35e847b62


    Headers

    Imports

    Sections

  • $_6_/ffdshow/makeAVIS.exe.manifest
    .xml
  • $_6_/ffdshow/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    8eb98c77a1ada89df5027bd5bf01c2f6


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/openIE.js
    .js
  • $_6_/ffdshow/pthreadGC2.dll
    .dll windows:4 windows x86 arch:x86

    4ed4b97c004af0f3c95aeb69c247d60b


    Headers

    Imports

    Exports

    Sections

  • $_6_/ffdshow/xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    50f664b643e7bf188874685ce2e531cc


    Headers

    Imports

    Exports

    Sections

  • NZellCodecUpdate.exe
    .exe windows:4 windows x86 arch:x86

    d8ff6126e59eca55a3b0d99183ec4333


    Headers

    Imports

    Sections