General

  • Target

    ea82d6c356711e95188613678b128aea_JaffaCakes118

  • Size

    12.0MB

  • MD5

    ea82d6c356711e95188613678b128aea

  • SHA1

    32b92da0a72c0096595a2aa7c1b6bf157c5b62d3

  • SHA256

    f1ca69676e88f663e34bc0c833941c9dd79b0a99c5110b8245f597fdefde9819

  • SHA512

    d6414ab86e63e19add9b6993d48c96891676f55c9c193d7cdf9585a314ad79dc5d65bdeeb01272cd6c7c5d9d4c3cf3dfdf92d03f333eda61159c9c277fa322df

  • SSDEEP

    196608:zkw+9lSw+9lmVW8M4h7LH2pifpRVw9nSRCrGvUriieKsxP/FlTMVjh0XddsxPTYT:z67cTmVNM4hntPw9nSMr7riZt/FlQVj0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • ea82d6c356711e95188613678b128aea_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • WZDUSetup_with_WZSM_5.12.0.10.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/WinZip/WinZip Driver Updater/Language/Brazilian.xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Danish.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Dutch.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/English.xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Finnish.xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/French.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/German.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Italian.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Japanese.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Norwegian.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Russian.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Spanish.xml
    .xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Swedish.xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/TradChinese.xml
  • $APPDATA/WinZip/WinZip Driver Updater/Language/Turkish.xml
    .xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    d3b0357e5a9df93304cb6f852ecac3b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsSessionSIDW.dll
    .dll windows:5 windows x86 arch:x86

    b3031de3a4e382143eb2236474719dea


    Headers

    Imports

    Exports

    Sections

  • DriverUpdater.exe
    .exe windows:5 windows x64 arch:x64

    9c150659d08ac9eda3ff86229218536a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DriverUpdaterUpdater.exe
    .exe windows:5 windows x64 arch:x64

    00fff98e7e291c5bdaf7e6fb126706f0


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsEnvVariables.dll
    .dll windows:5 windows x86 arch:x86

    211e16547fae1d5f51bf909bfc524385


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    02dceff3de5d2175177a78f2eb554a86


    Headers

    Imports

    Exports

    Sections