General

  • Target

    eb5f3eb719482c9c7f59b747e8bb0324_JaffaCakes118

  • Size

    10.7MB

  • MD5

    eb5f3eb719482c9c7f59b747e8bb0324

  • SHA1

    10bf498913770ef7ae0842b0b79d88867341631b

  • SHA256

    ca46a8d174fcba7f56d563195d35480747fc501c7edb45be6581902beffba7a1

  • SHA512

    0faaf7f70fffcfb6dd7bd3f9927189e92ff1cad38c76264b6cd6a8b65d23b8e66e421c13e15f70b94b0c503963559ee5eb1cf985c7d9f644a2bdc244ae62956b

  • SSDEEP

    196608:iNESOvXjcSQ0TRPVpXFrUxpmB6Q2/zqsvUOozUNwCnRSJXsfa:i+SIISTrrqmBgioGCUJXsi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • eb5f3eb719482c9c7f59b747e8bb0324_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Alawar/urlrun.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    d424185394c507e5a7ca428de07aeda0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISpcre.dll
    .dll windows:5 windows x86 arch:x86

    836f4951fb4175e54bfc7d7dac9c4c85


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OperaRu2_Comp1.bmp
    .ps1
  • $PLUGINSDIR/OperaRu2_arrs.bmp
  • $PLUGINSDIR/OperaRu2_head.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ebanner.dll
    .dll windows:6 windows x86 arch:x86

    76cd7ce79f426b48c9eba9b9b81f5403


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:5 windows x86 arch:x86

    0ca59bdeada30c9db45574a2801b70d8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsUnzip.dll
    .dll windows:5 windows x86 arch:x86

    66e414936a2f6934e6e40d52047d6b75


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/yandex_logo_illustration.bmp
  • license.html
    .html
  • license.txt