General

  • Target

    1029a9124b1381e54ad23ee88a6adb0f_JaffaCakes118

  • Size

    7.2MB

  • MD5

    1029a9124b1381e54ad23ee88a6adb0f

  • SHA1

    1f3a36d691f877fe83de8bca221d20fa16b1ece3

  • SHA256

    78f03d617612c182d376bd6b10e16412ff204c40b2caf211807066866efc914b

  • SHA512

    c079e9b5fc48d5497465e7d5259970d39f5b072e3af7a07aa0b24430e3f11c2b85a4c1dc677da1d58f3939b89719ec55999e86339799e102f87890683e5cc2aa

  • SSDEEP

    196608:OpMLTLuTs0aiUrAi5C8U65CZavsai1f1vruzU6tWGPiidmL22mlA:BfuTpaiUESxNaR1fpKzUKiemKhlA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1029a9124b1381e54ad23ee88a6adb0f_JaffaCakes118
    .cab
  • DMON.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    c0732a9e399e57b1ea39125d8cfca23d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DMON.dll_1
    .dll regsvr32 windows:4 windows x86 arch:x86

    0d381e7d8fbd9948e48fc8f88b70af88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EHttpSrv.exe
    .exe windows:4 windows x64 arch:x64

    18078e0bb93c3c325613d1850477db20


    Code Sign

    Headers

    Imports

    Sections

  • EHttpSrv.xml
    .xml
  • EpfwTdiR.sys
    .sys windows:6 windows x64 arch:x64

    90bef0e848ff9812080bfd6ad4882ae3


    Code Sign

    Headers

    Imports

    Sections

  • EpfwWfpR.inf
  • EpfwWfpR.sys
    .sys windows:6 windows x64 arch:x64

    45e4e0f9bd3785f5df14f89b0026c756


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.CRT.manifest_1
  • Microsoft.VC80.MFC.manifest
  • Microsoft.VC80.MFCLOC.manifest
    .xml
  • PPESET.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    44f215f7c39f26f31f10a5d490726047


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPEset.inf
  • SysInspector.exe_1
    .exe windows:4 windows x64 arch:x64

    dc5fc4488eda1edcb77436bb109f7de9


    Code Sign

    Headers

    Imports

    Sections

  • SysRescue.exe
    .exe windows:4 windows x64 arch:x64

    377eba41402674e7fd23814662d5559b


    Code Sign

    Headers

    Imports

    Sections

  • callmsi.exe
    .exe windows:4 windows x64 arch:x64

    86b299593640406a31b779d7bd538297


    Code Sign

    Headers

    Imports

    Sections

  • chrome.manifest
  • eamon.cat
  • eamon.inf
  • eamon.sys
    .sys windows:6 windows x64 arch:x64

    b402aae649d238ec40dc418486e1a591


    Code Sign

    Headers

    Imports

    Sections

  • eamonm.cat
  • eamonm.inf
  • eamonm.sys
    .sys windows:6 windows x64 arch:x64

    2d26d7cac32fa175bdffd85fdb7fe630


    Code Sign

    Headers

    Imports

    Sections

  • ecls.exe
    .exe windows:4 windows x86 arch:x86

    bc446c2384b978c680f7dd31f7b3d195


    Code Sign

    Headers

    Imports

    Sections

  • ecmd.exe
    .exe windows:4 windows x64 arch:x64

    77c78cd091275bf74e99b30a8340e41b


    Code Sign

    Headers

    Imports

    Sections

  • eeclnt.exe
    .exe windows:4 windows x64 arch:x64

    2df5745ea1b158fb69352a572af086ba


    Code Sign

    Headers

    Imports

    Sections

  • egui.exe
    .exe windows:4 windows x64 arch:x64

    2f2b25092388d094f6492be15effaca9


    Code Sign

    Headers

    Imports

    Sections

  • eguiAmon.dll
    .dll windows:4 windows x64 arch:x64

    74f03674a195d18cd64bee38aa3304fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eguiDmon.dll
    .dll windows:4 windows x64 arch:x64

    3c12f425567484659ba9acafdbb2e7fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eguiEmon.dll
    .dll windows:4 windows x64 arch:x64

    87fd495d200698ad073ca4e774bd93da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eguiEpfw.dll
    .dll windows:4 windows x64 arch:x64

    f81a12043b809c0b609917bdd2dc1355


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eguiMailPlugins.dll
    .dll windows:4 windows x64 arch:x64

    7f891718da25e92289588b23c670d8b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eguiProductRcd.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • eguiScan.dll
    .dll windows:4 windows x64 arch:x64

    798073bb214eecc2a5bfdb654da362f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eguiUpdate.dll
    .dll windows:4 windows x64 arch:x64

    d3a83976ed2d3d1e8cd4c025d8234e5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eh64.exe
    .exe windows:4 windows x64 arch:x64

    756a15a1acbf845b39a6df26f19b2f35


    Code Sign

    Headers

    Imports

    Sections

  • ehdrv.cat
  • ehdrv.inf
  • ehdrv.sys
    .sys windows:6 windows x64 arch:x64

    7b9016c913d73935e1f65e4519415b3b


    Code Sign

    Headers

    Imports

    Sections

  • ekrn.exe
    .exe windows:4 windows x86 arch:x86

    e66368fc4a6b44785619384bfcf922d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ekrnAmon.dll
    .dll windows:4 windows x86 arch:x86

    cde0c4c713505c3815c437a8a380b789


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ekrnDmon.dll
    .dll windows:4 windows x86 arch:x86

    bdb6f41caeba14374ef047260d5de6c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ekrnEmon.dll
    .dll windows:4 windows x86 arch:x86

    df85f29af7a2fe0e4fb559409c437ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ekrnEpfw.dll
    .dll windows:4 windows x86 arch:x86

    e90acc740efdec52b870644869b2ff94


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ekrnMailPlugins.dll
    .dll windows:4 windows x86 arch:x86

    fe736b98f1936938f348d7fba58371a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ekrnScan.dll
    .dll windows:4 windows x86 arch:x86

    a06c4bfc2f2b48c62cf2ea33bb514b5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ekrnUpdate.dll
    .dll windows:4 windows x86 arch:x86

    75f242fce4c2584c25384dbd298dddb6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • epfwtdir.cat
  • epfwtdir.inf
  • epfwwfpr.cat
  • eplgHooks.dll
    .dll windows:4 windows x64 arch:x64

    7c3c0c212571bf880848245d7b4fe725


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOE.dll
    .dll windows:4 windows x86 arch:x86

    c18b3f06adceb3a8bb2b71e3495afb65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOE.dll_1
    .dll windows:4 windows x64 arch:x64

    904454e05c86c474719108727bba248c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOEEmon.dll
    .dll windows:4 windows x64 arch:x64

    805391c74244e111b567718a2e70a3da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOEEmon.dll_1
    .dll windows:4 windows x86 arch:x86

    ba57c9421103fc524f914e8d3caf47af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOutlook.dll
    .dll windows:4 windows x86 arch:x86

    c5eb7bebe3022d11b2cc8fbc103a4617


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOutlook.dll_1
    .dll windows:4 windows x64 arch:x64

    8b70fb2c61abec8fafdec3c2c4d5ddc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOutlookEmon.dll
    .dll windows:4 windows x86 arch:x86

    ba5e23e9c3bb373fdee4e9fb04323902


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgOutlookEmon.dll_1
    .dll windows:4 windows x64 arch:x64

    d9dbdf40a277462a8f984c14553c900a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgTb.dll
    .dll windows:4 windows x86 arch:x86

    e58755ae47d8703a270ae1ac1d5cc39d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • eplgTbEmon.dll
    .dll windows:4 windows x86 arch:x86

    9a3999dbe1f861e912a898e9877dcad0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • http_dll.dll
    .dll windows:4 windows x64 arch:x64

    1ce38d7f8aacfb4c2a9c6b5128087a4a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • install.rdf
    .xml
  • mfc80.dll
    .dll windows:4 windows x64 arch:x64

    3984e4689b00ba94b372c08f846b91f8


    Headers

    Imports

    Sections

  • mfc80u.dll
    .dll windows:4 windows x64 arch:x64

    393dbb53ccecfe155d1188ff9d9e826a


    Headers

    Imports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x64 arch:x64

    6c31ff1756690f37d3e2c95f96fa9b5a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll_1
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shellExt.dll
    .dll windows:4 windows x64 arch:x64

    853b3815fba63b823b4b08cc5a9931d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shellExt.dll_1
    .dll windows:4 windows x86 arch:x86

    5e36b1fa405a2161ae5b7ceee9ab9900


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater.dll
    .dll windows:4 windows x86 arch:x86

    cd28fb39450a18a97fa73844b95840f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater.dll_1
    .dll windows:4 windows x64 arch:x64

    2f141a9a2ba3a092fed71241fcc95c36


    Code Sign

    Headers

    Imports

    Exports

    Sections