General

  • Target

    23fe9d504169b0e068ede09dfe18ea7d_JaffaCakes118

  • Size

    23.9MB

  • MD5

    23fe9d504169b0e068ede09dfe18ea7d

  • SHA1

    46cc384df3085b2a87184c58d4b2a57aff78a688

  • SHA256

    e00ab18bf0e514d361322b37bc6d0fbe4217fab07649fa7c71873827d7a31706

  • SHA512

    8d0c9bf297924852ddb329ae76a5b8619932f2e33fb3da9d36e8766115eec2039e9dc7f0bd8bdb329af3488a8751d828e998c4d7f312720b60106d3b3da5a64b

  • SSDEEP

    393216:6K95EBDPvv/o36x/zuNldSpZykN4lozo3ph3A7eJwMcPMe4fx2nDwlOIk:p95E5YgLK7u4mCh3A74e84cOf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 23fe9d504169b0e068ede09dfe18ea7d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    154903d617e825e7d4f76664593675fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0/infoman/clean/README
  • $R0/infoman/clean/adobe_reader.clean
  • $R0/infoman/clean/amsn.clean
  • $R0/infoman/clean/amule.clean
  • $R0/infoman/clean/apt.clean
  • $R0/infoman/clean/arora.clean
  • $R0/infoman/clean/audacious.clean
  • $R0/infoman/clean/azureus.clean
  • $R0/infoman/clean/beagle.clean
  • $R0/infoman/clean/chromium.clean
  • $R0/infoman/clean/clean.template
  • $R0/infoman/clean/easytag.clean
  • $R0/infoman/clean/elinks.clean
  • $R0/infoman/clean/emesene.clean
  • $R0/infoman/clean/epiphany.clean
  • $R0/infoman/clean/evolution.clean
  • $R0/infoman/clean/exaile.clean
  • $R0/infoman/clean/extmp.clean
  • $R0/infoman/clean/filezilla.clean
  • $R0/infoman/clean/firefox.clean
  • $R0/infoman/clean/flash.clean
  • $R0/infoman/clean/gedit.clean
  • $R0/infoman/clean/gftp.clean
  • $R0/infoman/clean/gimp.clean
  • $R0/infoman/clean/gl-117.clean
  • $R0/infoman/clean/gnome.clean
  • $R0/infoman/clean/google_chrome.clean
  • $R0/infoman/clean/google_earth.clean
  • $R0/infoman/clean/google_toolbar.clean
  • $R0/infoman/clean/gpodder.clean
  • $R0/infoman/clean/gwenview.clean
  • $R0/infoman/clean/hippo_opensim_viewer.clean
  • $R0/infoman/clean/home.clean
  • $R0/infoman/clean/ie.clean
  • $R0/infoman/clean/java.clean
  • $R0/infoman/clean/kde.clean
  • $R0/infoman/clean/konqueror.clean
  • $R0/infoman/clean/libreoffice.clean
  • $R0/infoman/clean/liferea.clean
  • $R0/infoman/clean/mc.clean
  • $R0/infoman/clean/midori.clean
  • $R0/infoman/clean/miro.clean
  • $R0/infoman/clean/msoffice.clean
  • $R0/infoman/clean/nautilus.clean
  • $R0/infoman/clean/nexuiz.clean
  • $R0/infoman/clean/octave.clean
  • $R0/infoman/clean/opera.clean
  • $R0/infoman/clean/pidgin.clean
  • $R0/infoman/clean/quiterss.clean
  • $R0/infoman/clean/realplayer.clean
  • $R0/infoman/clean/recoll.clean
  • $R0/infoman/clean/rhythmbox.clean
  • $R0/infoman/clean/safari.clean
  • $R0/infoman/clean/screenlets.clean
  • $R0/infoman/clean/seamonkey.clean
  • $R0/infoman/clean/secondlife_viewer.clean
  • $R0/infoman/clean/silverlight.clean
  • $R0/infoman/clean/skype.clean
  • $R0/infoman/clean/stardict.clean
  • $R0/infoman/clean/stellarium.clean
  • $R0/infoman/clean/teamviewer.clean
  • $R0/infoman/clean/thumbnails.clean
  • $R0/infoman/clean/thunderbird.clean
  • $R0/infoman/clean/transmission.clean
  • $R0/infoman/clean/tremulous.clean
  • $R0/infoman/clean/vlc.clean
  • $R0/infoman/clean/vuze.clean
  • $R0/infoman/clean/winamp.clean
  • $R0/infoman/clean/windows.clean
  • $R0/infoman/clean/windows_defender.clean
  • $R0/infoman/clean/windows_explorer.clean
  • $R0/infoman/clean/wine.clean
  • $R0/infoman/clean/winetricks.clean
  • $R0/infoman/clean/x11.clean
  • $R0/infoman/clean/xchat.clean
  • $R0/infoman/clean/xine.clean
  • $R0/infoman/clean/yahoo_messenger.clean
  • $R0/infoman/icons/accept.png
    .png
  • $R0/infoman/icons/alarm.png
    .png
  • $R0/infoman/icons/app_busy.png
    .png
  • $R0/infoman/icons/app_ready.png
    .png
  • $R0/infoman/icons/bad.png
    .png
  • $R0/infoman/icons/book.png
    .png
  • $R0/infoman/icons/btn_add.png
    .png
  • $R0/infoman/icons/btn_cancel.png
    .png
  • $R0/infoman/icons/btn_cancel2.png
    .png
  • $R0/infoman/icons/btn_clean.png
    .png
  • $R0/infoman/icons/btn_cmp.png
    .png
  • $R0/infoman/icons/btn_delete.png
    .png
  • $R0/infoman/icons/btn_edit.png
    .png
  • $R0/infoman/icons/btn_exit.png
    .png
  • $R0/infoman/icons/btn_find.png
    .png
  • $R0/infoman/icons/btn_gurus.png
    .png
  • $R0/infoman/icons/btn_inet.png
    .png
  • $R0/infoman/icons/btn_next.png
    .png
  • $R0/infoman/icons/btn_openfile.png
    .png
  • $R0/infoman/icons/btn_openmusic.png
    .png
  • $R0/infoman/icons/btn_quit.png
    .png
  • $R0/infoman/icons/btn_rest.png
    .png
  • $R0/infoman/icons/btn_save.png
    .png
  • $R0/infoman/icons/btn_scan.png
    .png
  • $R0/infoman/icons/btn_search.png
    .png
  • $R0/infoman/icons/btn_setskin.png
    .png
  • $R0/infoman/icons/btn_stop.png
    .png
  • $R0/infoman/icons/btn_sync.png
    .png
  • $R0/infoman/icons/btn_test.png
    .png
  • $R0/infoman/icons/btn_testmusic.png
    .png
  • $R0/infoman/icons/delete.png
    .png
  • $R0/infoman/icons/dred.gif
    .gif
  • $R0/infoman/icons/genpass.png
    .png
  • $R0/infoman/icons/icon_clean.png
    .png
  • $R0/infoman/icons/icon_sync.png
    .png
  • $R0/infoman/icons/infoman-busy.png
    .png
  • $R0/infoman/icons/infoman-ready.png
    .png
  • $R0/infoman/icons/infoman-uninstall.ico
  • $R0/infoman/icons/infoman.ico
  • $R0/infoman/icons/infoman.png
    .png
  • $R0/infoman/icons/left.png
    .png
  • $R0/infoman/icons/mini-bball.png
    .png
  • $R0/infoman/icons/mini-blackball.png
    .png
  • $R0/infoman/icons/mini-gball.png
    .png
  • $R0/infoman/icons/mini-grayball.png
    .png
  • $R0/infoman/icons/mini-rball.png
    .png
  • $R0/infoman/icons/mini-yball.png
    .png
  • $R0/infoman/icons/navigator.png
    .png
  • $R0/infoman/icons/ok.png
    .png
  • $R0/infoman/icons/passman.png
    .png
  • $R0/infoman/icons/remind.png
    .png
  • $R0/infoman/icons/remind_time.png
    .png
  • $R0/infoman/icons/remind_today.png
    .png
  • $R0/infoman/icons/remind_tomorrow.png
    .png
  • $R0/infoman/icons/remove.png
    .png
  • $R0/infoman/icons/right.png
    .png
  • $R0/infoman/icons/yes.png
    .png
  • $R0/infoman/infoman.cfg
  • $R0/infoman/sound/cancel.wav
  • $R0/infoman/sound/error.wav
  • $R0/infoman/sound/finish.wav
  • $R0/infoman/sound/notify.wav
  • $R0/infoman/sound/remind.wav
  • $R0/infoman/sound/run.wav
  • $R0/infoman/sound/warning.wav
  • Qt5Core.dll
    .dll windows:4 windows x86 arch:x86

    7d0db122736e9bd0e3badfbab424b809


    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:4 windows x86 arch:x86

    fb9e40f51206bbd7013d5fe0ef22caeb


    Headers

    Imports

    Exports

    Sections

  • Qt5Multimedia.dll
    .dll windows:4 windows x86 arch:x86

    41b8286a1f867a7b4e280e2ad77fd910


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:4 windows x86 arch:x86

    c609c0cf5f5cd35a968f8e65e03b7242


    Headers

    Imports

    Exports

    Sections

  • Qt5Sql.dll
    .dll windows:4 windows x86 arch:x86

    43d382dc6acce40e6dde78830752b685


    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:4 windows x86 arch:x86

    2b05e0c361f53b114a3a5be37315fd98


    Headers

    Imports

    Exports

    Sections

  • cryptopp.dll
    .dll windows:4 windows x86 arch:x86

    201fe27cf34d4c54a0d15e45fa6aabb2


    Headers

    Imports

    Exports

    Sections

  • icudt54.dll
    .dll windows:4 windows x86 arch:x86

    8868823211e5d048f534273f3190c905


    Headers

    Imports

    Exports

    Sections

  • icuin54.dll
    .dll windows:4 windows x86 arch:x86

    a0d54c15317731cbbe23e6f7c7e87a1d


    Headers

    Imports

    Exports

    Sections

  • icuuc54.dll
    .dll windows:4 windows x86 arch:x86

    d198e3ec20cc59f3fd3a285093c6582d


    Headers

    Imports

    Exports

    Sections

  • infoman.exe
    .exe windows:4 windows x86 arch:x86

    904e1b2481f4a69775fd250814e0e5f6


    Headers

    Imports

    Sections

  • libadvini.dll
    .dll windows:4 windows x86 arch:x86

    d9c64fbd1b07e63b28fd477c1608526a


    Headers

    Imports

    Exports

    Sections

  • libgcc_s_dw2-1.dll
    .dll windows:4 windows x86 arch:x86

    0b6927b63a77c62afd6ae0e1c3cbcedc


    Headers

    Imports

    Exports

    Sections

  • libmaint.dll
    .dll windows:4 windows x86 arch:x86

    39db6daf12f8ff2873348b14a2096082


    Headers

    Imports

    Exports

    Sections

  • libmaintqt5.dll
    .dll windows:4 windows x86 arch:x86

    a8ca3f4c6b0b005b415200d34af24315


    Headers

    Imports

    Exports

    Sections

  • libstdc++-6.dll
    .dll windows:4 windows x86 arch:x86

    bdb0146dd5cfb9bf0a6eeab4d170531f


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x86 arch:x86

    bd28fc239497e62d0f3158fb5e32a191


    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:4 windows x86 arch:x86

    9406c12e8a983d404ea34391aed58bb8


    Headers

    Imports

    Exports

    Sections

  • plugins/fsync.dll
    .dll windows:4 windows x86 arch:x86

    dc3961e429f4e246ce69c20c9b5a7a92


    Headers

    Imports

    Exports

    Sections

  • plugins/infopass.dll
    .dll windows:4 windows x86 arch:x86

    7399030364a821dace7e7edf5ca6c421


    Headers

    Imports

    Exports

    Sections

  • plugins/purge.dll
    .dll windows:4 windows x86 arch:x86

    ddf35302f82aa11cdfa64d49fe7dd98e


    Headers

    Imports

    Exports

    Sections

  • plugins/remind.dll
    .dll windows:4 windows x86 arch:x86

    ad0853fe06df978047b0b150d5a44bbb


    Headers

    Imports

    Exports

    Sections

  • plugins/setplug.dll
    .dll windows:4 windows x86 arch:x86

    5fc084c938ae5663725252842d84e11c


    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    4e744ac3803b926cda3bdc831dc129e4


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections