General

  • Target

    018aad2110fee29963811ff977c50b7c_JaffaCakes118

  • Size

    17.1MB

  • MD5

    018aad2110fee29963811ff977c50b7c

  • SHA1

    d526fafb9abc3863591efee6bd9afc10f8e7729e

  • SHA256

    f0ecf16165d1f7096cfd9a0369e805edace1114139e00a26fa21fb3117241c8c

  • SHA512

    62ab891a808abc22afb60da1f0818ad7dc8659f9e30ddb693cb8db36eb305c699bf1b5a78ad8ea94d294f70e45e0582565d84bc83f11e4fd5b26fc8d0a6e7511

  • SSDEEP

    393216:VoPdjgMjO5NRS2HlnCaYMZ5+tn7CdrJ6I2aAtlC3EYzHZ:qP6MjO5VlW32aIct43EY1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 018aad2110fee29963811ff977c50b7c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    735e27ae3d7df8c0487e4353d04f6f28


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewall.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ut_web_redist/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Code Sign

    Headers

    Imports

    Sections

  • avcodec-58.dll
    .dll windows:6 windows x86 arch:x86

    f5d8e3aad8a0b416ab9d688c36a61254


    Headers

    Imports

    Exports

    Sections

  • avfilter-7.dll
    .dll windows:6 windows x86 arch:x86

    f219350af5b1aec20409637bf3f3d892


    Headers

    Imports

    Exports

    Sections

  • avformat-58.dll
    .dll windows:6 windows x86 arch:x86

    6d2a04fff3f61dc5019c0a94abdefe23


    Headers

    Imports

    Exports

    Sections

  • avutil-56.dll
    .dll windows:6 windows x86 arch:x86

    c0b3eda0ee6168eff6c580f6fac1a8fd


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:6 windows x86 arch:x86

    0759c8e6a96bd95ffcafd0fb69960e6b


    Headers

    Imports

    Exports

    Sections

  • localization/de.lang
  • localization/es-la.lang
  • localization/fr.lang
  • localization/it.lang
  • localization/ja.lang
  • localization/ko.lang
  • localization/nl.lang
  • localization/pl.lang
  • localization/pt-br.lang
  • localization/pt.lang
  • localization/ru.lang
  • localization/tr.lang
  • localization/zh-cn.lang
  • localization/zh-tw.lang
  • main.ico
  • ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    8db0ff311282cece54a7900cde2d8684


    Headers

    Imports

    Exports

    Sections

  • swresample-3.dll
    .dll windows:6 windows x86 arch:x86

    f5e3d04b69df3f812cd0d2922f741bb9


    Headers

    Imports

    Exports

    Sections

  • uninstall.ico
  • utweb.exe
    .exe windows:6 windows x86 arch:x86

    451c531ed289e9fafe6bcd4800e1fcb9


    Code Sign

    Headers

    Imports

    Sections

  • webui.zip
    .zip
  • bundle.js
    .js
  • extension.html
    .html .js polyglot
  • fonts/LibreFranklin-Bold.ttf
  • fonts/LibreFranklin-Light.ttf
  • fonts/LibreFranklin-Regular.ttf
  • fonts/LibreFranklin-SemiBold.ttf
  • imgs/src/stylesheets/flags/imgs/1x1/br.svg
  • imgs/src/stylesheets/flags/imgs/1x1/cn.svg
  • imgs/src/stylesheets/flags/imgs/1x1/de.svg
  • imgs/src/stylesheets/flags/imgs/1x1/es.svg
  • imgs/src/stylesheets/flags/imgs/1x1/fr.svg
  • imgs/src/stylesheets/flags/imgs/1x1/gb.svg
  • imgs/src/stylesheets/flags/imgs/1x1/it.svg
  • imgs/src/stylesheets/flags/imgs/1x1/jp.svg
  • imgs/src/stylesheets/flags/imgs/1x1/kr.svg
  • imgs/src/stylesheets/flags/imgs/1x1/nl.svg
  • imgs/src/stylesheets/flags/imgs/1x1/pl.svg
  • imgs/src/stylesheets/flags/imgs/1x1/pt.svg
  • imgs/src/stylesheets/flags/imgs/1x1/ru.svg
  • imgs/src/stylesheets/flags/imgs/1x1/tr.svg
  • imgs/src/stylesheets/flags/imgs/1x1/us.svg
  • imgs/src/stylesheets/flags/imgs/4x3/br.svg
  • imgs/src/stylesheets/flags/imgs/4x3/cn.svg
  • imgs/src/stylesheets/flags/imgs/4x3/de.svg
  • imgs/src/stylesheets/flags/imgs/4x3/es.svg
  • imgs/src/stylesheets/flags/imgs/4x3/fr.svg
  • imgs/src/stylesheets/flags/imgs/4x3/gb.svg
  • imgs/src/stylesheets/flags/imgs/4x3/it.svg
  • imgs/src/stylesheets/flags/imgs/4x3/jp.svg
  • imgs/src/stylesheets/flags/imgs/4x3/kr.svg
  • imgs/src/stylesheets/flags/imgs/4x3/nl.svg
  • imgs/src/stylesheets/flags/imgs/4x3/pl.svg
  • imgs/src/stylesheets/flags/imgs/4x3/pt.svg
  • imgs/src/stylesheets/flags/imgs/4x3/ru.svg
  • imgs/src/stylesheets/flags/imgs/4x3/tr.svg
  • imgs/src/stylesheets/flags/imgs/4x3/us.svg
  • index.html
    .js
  • noauth.html
  • search_redirect.html
    .js
  • share.html
    .html .js polyglot
  • static/imgs/bt-favicon.ico
  • static/imgs/bt-web-logo-black-background.svg
    .xml
  • static/imgs/bt-web-logo-white-background.svg
    .xml
  • static/imgs/fallback-image.png
    .png
  • static/imgs/no-access.svg
  • static/imgs/ut-favicon.ico
  • static/imgs/ut-web-logo-black-background.svg
    .xml
  • static/imgs/ut-web-logo-white-background.svg
    .xml
  • static/js/_g_a_.min.js
    .js
  • static/js/axios-polyfill.js
    .js
  • static/js/base64.js
    .js
  • static/js/bench.js
    .js
  • static/js/jquery-3.1.1.min.js
    .js
  • static/js/promise-polyfill.js
    .js
  • styles.css
  • webui_version.txt
  • webui/version.txt