General

  • Target

    852b1c668870b9e64ac7c23d5d75ee9e_JaffaCakes118

  • Size

    6.7MB

  • MD5

    852b1c668870b9e64ac7c23d5d75ee9e

  • SHA1

    28b2571d9d3585552480607a95e9dd242b96a766

  • SHA256

    6db345ff7f370b0785a5ce1a0f3e8d9b2a8d8fb6a236d29744c87749868adc50

  • SHA512

    e375078ad47ef25612e81051dd366f23db30534e7743a9b5b708a58a3b5086521d5c0c5d7a1998d7c9196e18adfc51777a2ff824dde61983149dbc0e2c112588

  • SSDEEP

    196608:D7q7IsFwqyNah8zqpati6Kf5rnVQ1V85Ej:DzmU68maV4Rne85q

Score
10/10

Malware Config

Signatures

  • Panda Stealer payload 1 IoCs
  • Pandastealer family
  • Unsigned PE 47 IoCs

    Checks for missing Authenticode signature.

Files

  • 852b1c668870b9e64ac7c23d5d75ee9e_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:5 windows x86 arch:x86

    cbc66eb3222e3fcdbee2e18ba7195f5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll windows:5 windows x86 arch:x86

    cbaa743e839b4c7508b43278250895e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/logo360main.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $TEMP/pin.vbs
    .vbs
  • CSMX.dll
    .dll windows:4 windows x86 arch:x86

    e37f7efe98ea725b5013810ca8514b87


    Headers

    Imports

    Exports

    Sections

  • Esdll.dll
    .dll windows:4 windows x86 arch:x86

    727122a5be2245cc72b0c6152b3d74d6


    Headers

    Imports

    Exports

    Sections

  • IVMSource.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    1ae61317dec34b6d2bc750d4a7e31465


    Headers

    Imports

    Exports

    Sections

  • OpenCandy/OCSetupHlp.dll
    .dll windows:5 windows x86 arch:x86

    cbaa743e839b4c7508b43278250895e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OpenCandy/OpenCandy_Why_Is_This_Here.txt
  • PmpSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    3b061fad8266f6f03923cff87f660920


    Headers

    Imports

    Exports

    Sections

  • RadGtSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    635acae72f0a325d4d8ee6a93ca09305


    Headers

    Imports

    Exports

    Sections

  • binkw32.dll
    .dll windows:4 windows x86 arch:x86

    863844ad7aa759748e31329c65f10f35


    Headers

    Imports

    Exports

    Sections

  • csfcodec/ijl15.dll
    .dll windows:4 windows x86 arch:x86

    43fd8fd13d2d05654de14de52b9d512d


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mcucltu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7936f92318430ce8624f42c4041836f


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mcufilecu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4324400c9d632fe833a1b2a058534034


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mdssockc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9914558a7a38407454d235202796d25a


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mtcontain.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3315a8ec8b3a582cafff8a545edf4e1e


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mtcontrol.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7870771ba65489879970c819013eb8ca


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxaudio.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0b96ee7a874474914092aaf0295b8d4e


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxrender.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    107db36d92280f8e4f340dd812750d92


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxscreen.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    27efafc89669d831ec33842d36fc3284


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxshbasu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    50afe3a74e93b027483ceebef38966a3


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxshmaiu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a1817a287b4885d47e7c26c3fcc2e4fa


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxshsour.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1484867acca44d86b2d845db04e0c9f8


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxsource.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0ed9c32523266815d8702f2f18643290


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_mxvideo.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fa2ee8ebe446184e5eb4bd56e98a1e60


    Headers

    Imports

    Exports

    Sections

  • csfcodec/mpc_wtlvcl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f1344e5402d45176281f313f4dc5b0cb


    Headers

    Imports

    Exports

    Sections

  • dh264.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0a178f6e8386f5645f237a968c75451


    Headers

    Imports

    Exports

    Sections

  • haalis.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    414ec1bc0de0d85027929ca19e0d6be5


    Headers

    Imports

    Exports

    Sections

  • hotkey/SPlayer.key
  • ir41_32.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    1927d0db3b7884104ff5f0a44713b4b2


    Headers

    Imports

    Exports

    Sections

  • ir50_32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a27070539407160f6a16064876e70fed


    Headers

    Imports

    Exports

    Sections

  • ivm.dll
    .dll windows:4 windows x86 arch:x86

    aeb197e7e6584ffaf9e62283b82c11d7


    Headers

    Imports

    Exports

    Sections

  • lang/splayer.cht.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • lang/splayer.en.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • lang/splayer.ge.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • lang/splayer.ru.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • mc.dll
    .dll windows:4 windows x86 arch:x86

    c6aed6c2324d9c96df47837b112afcae


    Headers

    Imports

    Exports

    Sections

  • mkunicode.dll
    .dll windows:5 windows x86 arch:x86

    1da5d5aea5082cc09bfa84c92764c4f2


    Headers

    Imports

    Exports

    Sections

  • mkzlib.dll
    .dll windows:5 windows x86 arch:x86

    efcc761811aa76f93e9c981878270d69


    Headers

    Imports

    Exports

    Sections

  • mmamrdmx.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    cf22c0c7ff7ad0f5db3ffbc40fed2717


    Headers

    Imports

    Exports

    Sections

  • mp4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    300402277af0c7024c23e778e66ea696


    Headers

    Imports

    Exports

    Sections

  • ogm.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    b917edfd761f1ce9e8e8288156f4e023


    Headers

    Imports

    Exports

    Sections

  • rlapedec.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    368725cbc26491f4c1eba4496db1bb3d


    Headers

    Imports

    Exports

    Sections

  • sinet.dll
    .dll windows:5 windows x86 arch:x86

    096a8d9d24e5c837b7d1d4edd16b1887


    Headers

    Imports

    Exports

    Sections

  • smackw32.dll
    .dll windows:4 windows x86 arch:x86

    bf0ee0de6cbd5865762c575dc8f8545c


    Headers

    Imports

    Exports

    Sections

  • sphash.dll
    .dll windows:5 windows x86 arch:x86

    69eb3b6ebe4cae86f24a356e5c4de784


    Headers

    Imports

    Exports

    Sections

  • splayer.exe
    .exe windows:5 windows x86 arch:x86

    7a08258a0ef9848d62f88769685692d5


    Code Sign

    Headers

    Imports

    Sections

  • ts.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    282ab4084f47e3d52f7361377f375f8f


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis
  • unrar.dll
    .dll windows:5 windows x86 arch:x86

    d40363c7ef8bb596c83c90482d2c056c


    Headers

    Imports

    Sections

  • vp6dec.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    ff1fa4ec04e991f4a598878a4c461e63


    Headers

    Imports

    Exports

    Sections

  • vp8decoder.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    199b07b9d7ffa0b7b507692853b9bdfa


    Headers

    Imports

    Exports

    Sections