General

  • Target

    29738df935d99119bead85048d5d8aef_JaffaCakes118

  • Size

    13.4MB

  • MD5

    29738df935d99119bead85048d5d8aef

  • SHA1

    f701e23a5db70e7515b8861ac5ca35371d208193

  • SHA256

    afb770c8afe524ed0c055f10fd7032860478346f6d02622bf8afc85c41b0dab5

  • SHA512

    b7cc3d4d1d82a382d9011266a4645a1dd67921ad59f82b4a3733180364b2534a4312e75731d6855d8c350517d707c080a43dee4b058012240899081c09053d3f

  • SSDEEP

    393216:1kZWdyZWlk5f+7c41dHVdapcD5Nz/YMcqn4xnxd/Kv2L:1jd1lKf0JVdQu5NzFc44JOv2L

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 29738df935d99119bead85048d5d8aef_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • 66d0f2d1-48fc-471d-95a1-ea1dbb8df335.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Bulgarian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Croatian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Czech.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Danish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Dutch.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/English.xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Finnish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/French.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/German.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Greek.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Hungarian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Indonesian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Italian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Japanese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Korean.xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Norwegian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Polish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Portuguese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Romanian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Russian.xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/SimpChinese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Spanish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Swedish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Thai.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/TradChinese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Turkish.xml
    .xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    d3b0357e5a9df93304cb6f852ecac3b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsSessionSIDW.dll
    .dll windows:5 windows x86 arch:x86

    b3031de3a4e382143eb2236474719dea


    Headers

    Imports

    Exports

    Sections

  • FileExtensionManager-vc100-mt.dll
    .dll windows:5 windows x64 arch:x64

    92277da510c5037edb78a57ffc95ba52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FileExtensionManager-vc100-mt.mab
  • RegistryOptimizer.exe
    .exe windows:5 windows x64 arch:x64

    2e084f41c7485069880492aed7f73e08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RegistryOptimizer.mab
  • RegistryOptimizerUpdater.exe
    .exe windows:5 windows x64 arch:x64

    fc0bd645919cf635b73acd0618661a4e


    Code Sign

    Headers

    Imports

    Sections

  • RegistryOptimizerUpdater.mab
  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsEnvVariables.dll
    .dll windows:5 windows x86 arch:x86

    211e16547fae1d5f51bf909bfc524385


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    02dceff3de5d2175177a78f2eb554a86


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tray.exe
    .exe windows:5 windows x64 arch:x64

    e2d9ba3dce9a90bc77b5c5d554777c54


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tray.mab