General

  • Target

    e7638d3f931fd0a7334a4a889a748499_JaffaCakes118

  • Size

    1.2MB

  • MD5

    e7638d3f931fd0a7334a4a889a748499

  • SHA1

    e36418a7569ae012684b002e3adfb5046926b806

  • SHA256

    29950d4144f65ecc80b5baad8589700cafd0a3ceeb893254aa1ec26dfced6047

  • SHA512

    0befd225c3f30583557edc12c5b9209cba0ce984e69bc9f9307f7d17a58e0a59c5670d7eab9f88c9f542e9ad37e5b2120b859314c408cded7034a5b7cd438d2d

  • SSDEEP

    24576:JZ1YKSdeF1dATT8lAbwO8RR0GLuuP4kSKra0ulOu/5RsQLW9Ezk:NLLNAT6YE5yuPpSKraLE25RHL3g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e7638d3f931fd0a7334a4a889a748499_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyBabylonTB.exe
    .exe windows:5 windows x86 arch:x86

    616f8a11d0ee76db2bc674f8299827e4


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/logo_small.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pic1.bmp
  • $PLUGINSDIR/pp_screen.bmp
  • $PLUGINSDIR/tbpacks.bmp
  • $PLUGINSDIR/toolbar.bmp
  • GinoPlayer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Interop.WMPLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Uninstall.exe.nsis
  • launcher.exe
    .exe windows:4 windows x86 arch:x86

    a7aec9c88e96b4c7d04dacfc8ad9e982


    Headers

    Imports

    Sections

  • uninstall.ico