General

  • Target

    ff72119cec0aafe39adfd7df4b36c872_JaffaCakes118

  • Size

    14.2MB

  • MD5

    ff72119cec0aafe39adfd7df4b36c872

  • SHA1

    5fdfcfabc4c38b6f52e1adc762c13fbcebd4486c

  • SHA256

    7d5bb06bd201bbe175dbc56cad9fb2a5c66cd54075e4d2ac1d064add64b03f81

  • SHA512

    d06ceb6f8f036dc7fa3060046e5345d4a3ee8c6914a47ff806c823c210db1c22cfb0fa42023ca072ebe7f9d69a810272a8b2c3c3cdab21d8ed4c334aefa43697

  • SSDEEP

    393216:sDF1dnp1VLLt0+FYjPLZIWZ0v0dy2Z/oezOdIl:e1dnp10+FsPBGv0dy2Z/N6dIl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ff72119cec0aafe39adfd7df4b36c872_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Licence.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e9cfbaa1410d6085206b91504149f7bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/Photos/01.png
    .png
  • $TEMP/XL7InstallUI/Photos/02.png
    .png
  • $TEMP/XL7InstallUI/Photos/03.png
    .png
  • $TEMP/XL7InstallUI/Photos/04.png
    .png
  • $TEMP/XL7InstallUI/Photos/05.png
    .png
  • $TEMP/XL7InstallUI/Photos/Arrow.png
    .png
  • $TEMP/XL7InstallUI/Photos/Close.png
    .png
  • $TEMP/XL7InstallUI/Photos/Folder.png
    .png
  • $TEMP/XL7InstallUI/Photos/GeneralPro.png
    .png
  • $TEMP/XL7InstallUI/Photos/Light.png
    .png
  • $TEMP/XL7InstallUI/Photos/MessageBack.png
    .png
  • $TEMP/XL7InstallUI/Photos/ProBlue.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduBottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomBackOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/button.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishMiddleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/font.png
    .png
  • $TEMP/XL7InstallUI/Photos/frame.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon2.png
    .png
  • $TEMP/XL7InstallUI/Photos/middleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/select.png
    .png
  • $TEMP/XL7InstallUI/Photos/setup.ico
  • $TEMP/XL7InstallUI/Photos/title.ico
  • $TEMP/XL7InstallUI/Photos/tooltip.png
    .png
  • $TEMP/XL7InstallUI/Photos/upOver.png
    .png
  • $TEMP/XL7InstallUI/XL7InstallUI.dll
    .dll windows:4 windows x86 arch:x86

    1f35ec707ef5cb7fd74f69e321ea6d9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    d97f1369952134ddf6c76d159175683e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    9cfb35e4199eef27f6fcf72415dd64b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections

  • Program/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    d97f1369952134ddf6c76d159175683e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    9cfb35e4199eef27f6fcf72415dd64b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • Program/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • Program/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • Program/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Program/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Program/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections