General

  • Target

    f4e41f19395251ee15683ed797e7f04b_JaffaCakes118

  • Size

    1.4MB

  • MD5

    f4e41f19395251ee15683ed797e7f04b

  • SHA1

    72d5a637d51e3e2c6fb442513a6bc60fe070973a

  • SHA256

    16ee7e004bd4f9ec334884b9e630378eb14f301ac56ed922f986cec31ce95823

  • SHA512

    9c6759b3aae0ccdf9315c76c3d6829e76ee5ac1916781b6995aed875ff1326bfd457df27025df2e78d3cdbbc43dab19d4c6b61d59d524035ff06098b170940ff

  • SSDEEP

    24576:dcK/ahP2rvBXNTkOjru8Jkbx6I7WPLnHOa6iqlKhQpWp/HRMDShiwkO451t5:557jy60j6mcyg9gx1O43t5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f4e41f19395251ee15683ed797e7f04b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System3.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:5 windows x86 arch:x86

    09a3e096fa98fc82beb9603daab2ea15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/Chromium.dll
    .dll windows:6 windows x86 arch:x86

    f2358c15a68c5e7ba6256467178b2b1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/KompexSQLiteWrapper.dll
    .dll windows:5 windows x86 arch:x86

    b79ba4ab2edf6a6d884a8363550f0fa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/TkArOdh.dll
    .dll windows:5 windows x86 arch:x86

    8c41216a4e0bacf1f6215cbdddaf88e4


    Code Sign

    Headers

    Imports

    Sections

  • $R2/freebl3.dll
    .dll windows:6 windows x86 arch:x86

    68765e49af812cea06653c4ddee9320d


    Headers

    Imports

    Exports

    Sections

  • $R2/nspr4.dll
    .dll windows:6 windows x86 arch:x86

    a6070e3824e66675bb029a2cf7952a4f


    Headers

    Imports

    Exports

    Sections

  • $R2/nss3.dll
    .dll windows:6 windows x86 arch:x86

    9e2f8a8cfc34da6dfd8f2fda9de568a7


    Headers

    Imports

    Exports

    Sections

  • $R2/nssutil3.dll
    .dll windows:6 windows x86 arch:x86

    6ba16e7e12b3827a81a688ff0a5191a4


    Headers

    Imports

    Exports

    Sections

  • $R2/plc4.dll
    .dll windows:6 windows x86 arch:x86

    4598533a0c3b6c5ddb9612a89de425ce


    Headers

    Imports

    Exports

    Sections

  • $R2/plds4.dll
    .dll windows:6 windows x86 arch:x86

    4f9a53fbf939884bc7e65bde68799fc4


    Headers

    Imports

    Exports

    Sections

  • $R2/softokn3.dll
    .dll windows:6 windows x86 arch:x86

    f62703f3be4a59d359a62952d431248f


    Headers

    Imports

    Exports

    Sections

  • $R2/sqlite3.dll
    .dll windows:6 windows x86 arch:x86

    08e0c5c4d25d1d7e6ba2923f9444c9ee


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/Chromium.dll
    .dll windows:6 windows x86 arch:x86

    f2358c15a68c5e7ba6256467178b2b1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/KompexSQLiteWrapper.dll
    .dll windows:5 windows x86 arch:x86

    b79ba4ab2edf6a6d884a8363550f0fa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/TkArOdh.dll
    .dll windows:5 windows x86 arch:x86

    8c41216a4e0bacf1f6215cbdddaf88e4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/$_2_/freebl3.dll
    .dll windows:6 windows x86 arch:x86

    68765e49af812cea06653c4ddee9320d


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/nspr4.dll
    .dll windows:6 windows x86 arch:x86

    a6070e3824e66675bb029a2cf7952a4f


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/nss3.dll
    .dll windows:6 windows x86 arch:x86

    9e2f8a8cfc34da6dfd8f2fda9de568a7


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/nssutil3.dll
    .dll windows:6 windows x86 arch:x86

    6ba16e7e12b3827a81a688ff0a5191a4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/plc4.dll
    .dll windows:6 windows x86 arch:x86

    4598533a0c3b6c5ddb9612a89de425ce


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/plds4.dll
    .dll windows:6 windows x86 arch:x86

    4f9a53fbf939884bc7e65bde68799fc4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/softokn3.dll
    .dll windows:6 windows x86 arch:x86

    f62703f3be4a59d359a62952d431248f


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/sqlite3.dll
    .dll windows:6 windows x86 arch:x86

    08e0c5c4d25d1d7e6ba2923f9444c9ee


    Headers

    Imports

    Exports

    Sections