General

  • Target

    156e2639cbdffd93f10a19893556594d_JaffaCakes118

  • Size

    2.0MB

  • MD5

    156e2639cbdffd93f10a19893556594d

  • SHA1

    e106efa0f059d1860f8dc4c311429e1c9ce85a30

  • SHA256

    8d693727d9e8648c653f91c9a8c4ce19030ac7c073a9b9838376f7cf89145dd1

  • SHA512

    96027826815b03a5d55aff2d3cad87e1c03e4f6b94d7fdb044395ade10117b62f62e3bc2a29d0a8722575dd8c40e287fe42b8b75d6c9c5c7eee967fbb8cc5b05

  • SSDEEP

    49152:yNGu4WltT52unnDEuCbXKHKgkoocu+NGowKl0J1Bh8l:YGkAunnDEuCbXpbVRWJGJbh8l

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 156e2639cbdffd93f10a19893556594d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Licence.txt
  • $PLUGINSDIR/SkinBtn.dll
    .dll windows:4 windows x86 arch:x86

    baf2d405231cd43dae48df474a521d01


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SkinProgress.dll
    .dll windows:4 windows x86 arch:x86

    df38729be926f91d3390389029adf53b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WndProc.dll
    .dll windows:4 windows x86 arch:x86

    b3f659d7637a91b4fec12ff9b930080d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/checkbox1.bmp
  • $PLUGINSDIR/checkbox2.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/custom.bmp
  • $PLUGINSDIR/finish.bmp
  • $PLUGINSDIR/install.bmp
  • $PLUGINSDIR/install_step1.bmp
  • $PLUGINSDIR/install_step2.bmp
  • $PLUGINSDIR/install_step3.bmp
  • $PLUGINSDIR/loading1.bmp
  • $PLUGINSDIR/loading2.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/return.bmp
  • Lunar.dll
    .dll windows:5 windows x86 arch:x86

    1e8676d6112566fdb38374322b20a799


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • yvfdp.exe
    .exe windows:5 windows x86 arch:x86

    6c3ae785b75949fe9b6dcecf77af48fc


    Code Sign

    Headers

    Imports

    Sections