General

  • Target

    01181a8e0bc4def08284efb5ac9f840a_JaffaCakes118

  • Size

    2.4MB

  • MD5

    01181a8e0bc4def08284efb5ac9f840a

  • SHA1

    68c761c2ccda1836051e20c5cf50b99efe6d3b77

  • SHA256

    ec60beee43104003bc410371ae1ef8e846e17ff5733556dbd8e7acae68058200

  • SHA512

    ede6e43c5e4dd56a68a15c06717241464ad9091ca30bd8092f9b10146156a1ae1b761b40bf20acd28a8be3038da7511d6fe3b21c6bb1f7e5d7794f667ff53f44

  • SSDEEP

    49152:TZZuTCbQ4pPiwlugX+JmaSNzY/9rqYv4/QQB6xcz9fT++Y9H7FCD:dZ+Cbgwl1+J3K09O/dB6GxTKFg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 01181a8e0bc4def08284efb5ac9f840a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $0/SoftwareUpdate.exe
    .exe windows:5 windows x86 arch:x86

    e8d2e713385a0d92856c3f36c7e8f71a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FF/firefox_cauliflower.7z
    .7z
  • add-certs.cmd
    .cmd .vbs
  • bin/COPYING
  • bin/LICENSE
  • bin/README.md
  • bin/certutil.exe
    .exe windows:5 windows x86 arch:x86

    54ad3a463e979be9777a9c1b4b621580


    Headers

    Imports

    Sections

  • bin/freebl3.dll
    .dll windows:6 windows x86 arch:x86

    4d3380cdbdb7eefd5cbcaa19c279f8e7


    Headers

    Imports

    Exports

    Sections

  • bin/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/nspr4.dll
    .dll windows:6 windows x86 arch:x86

    64781e2d3963d5ee9eab772c65d80fb7


    Headers

    Imports

    Exports

    Sections

  • bin/nss3.dll
    .dll windows:6 windows x86 arch:x86

    e8639d9d4cdcf5c8aacb5a14c0691e42


    Headers

    Imports

    Exports

    Sections

  • bin/nssckbi.dll
    .dll windows:6 windows x86 arch:x86

    b5dd8280a5743c20bb94b7561f0f3c88


    Headers

    Imports

    Exports

    Sections

  • bin/nssdbm3.dll
    .dll windows:6 windows x86 arch:x86

    fb09273820d3f06630824e01c95a8023


    Headers

    Imports

    Exports

    Sections

  • bin/nssutil3.dll
    .dll windows:6 windows x86 arch:x86

    93df069a539ebae935811f1a931b3e88


    Headers

    Imports

    Exports

    Sections

  • bin/plc4.dll
    .dll windows:6 windows x86 arch:x86

    0bda4b4e468aef51dcef11a4a80c2013


    Headers

    Imports

    Exports

    Sections

  • bin/plds4.dll
    .dll windows:6 windows x86 arch:x86

    be9f272b9d2aa25b2ea30caff579bee0


    Headers

    Imports

    Exports

    Sections

  • bin/smime3.dll
    .dll windows:6 windows x86 arch:x86

    1ccc99a79d2fdb267d3465a58eb7ccda


    Headers

    Imports

    Exports

    Sections

  • bin/softokn3.dll
    .dll windows:6 windows x86 arch:x86

    792583364ed82124375604ad797768fe


    Headers

    Imports

    Exports

    Sections

  • bin/sqlite3.dll
    .dll windows:6 windows x86 arch:x86

    d737ec21c2c1c2a6d0b67d6c970af864


    Headers

    Imports

    Exports

    Sections

  • bin/ssl3.dll
    .dll windows:6 windows x86 arch:x86

    56738d2693f9bc590cf14585609a3360


    Headers

    Imports

    Exports

    Sections

  • cacert/ca.cert.pem
  • certificate.cer
  • db/empty/cert8.db
  • db/empty/key3.db
  • db/empty/secmod.db
  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:4 windows x86 arch:x86

    fb89301642ac2a39aefdd3cc2610ed81


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    46f8b6973f33717335c0f6d8087de67b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    c8fc3b55c70f2f31f4c8639bf1efe362


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis