General

  • Target

    4c44f7b065460f2cfd4542cc0b7f0862_JaffaCakes118

  • Size

    14.6MB

  • MD5

    4c44f7b065460f2cfd4542cc0b7f0862

  • SHA1

    6316b9216b78d94a8eacc0a5eb6f439fcaf5aa35

  • SHA256

    b884cf5f5c0e7df4b609553f2ad8a8bd0e8e2009cf300f10c8e6b40dc1fc4436

  • SHA512

    fd3c2cc2a7849fa514762735a1b90e3128590f6c37545c0de3bc89b9077e868100c97a8ec8da853799444d4de58b7e54a08eb27c6a30405b00f310e8bfd6e52b

  • SSDEEP

    393216:GIxdd7k38HJTXe94ThKp4lmjEl9++O8bSf+FimmpuzXs+SJu89bU:GIxdd43kJ8UDlmY9m8bJE+Sx9U

Score
3/10

Malware Config

Signatures

  • Unsigned PE 50 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 4c44f7b065460f2cfd4542cc0b7f0862_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/Mumble/mumble-mailru.sqlite
  • $PLUGINSDIR/CPUFeatures.dll
    .dll windows:4 windows x86 arch:x86

    199e18a03ff9bd63ed8dc34d65927e4f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcUnicode.dll
    .dll windows:5 windows x86 arch:x86

    9ce5cff23b6eafd1a20bccf86421b051


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    d78ca16597d32a4413a1ca1794041785


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll windows:5 windows x86 arch:x86

    17190b5a1fc1a92cda78c150bb8d6fdb


    Headers

    Imports

    Exports

    Sections

  • Changes.txt
    .vbs
  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    0064ec07e8cde3cfaba0f6bd02f59ec2


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    58ce5fb9fa99c1adee5e1200fa5f18a3


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    a158b703e9c84c8d5add0f543848362d


    Headers

    Imports

    Exports

    Sections

  • QtOpenGL4.dll
    .dll windows:5 windows x86 arch:x86

    a19e4881eb9cfd4b58943e28041f9185


    Headers

    Imports

    Exports

    Sections

  • QtPlugins/accessible/qtaccessiblewidgets4.dll
    .dll windows:5 windows x86 arch:x86

    1b8fc8727020c3ebcf713ef4fa9fa860


    Headers

    Imports

    Exports

    Sections

  • QtPlugins/codecs/qcncodecs4.dll
    .dll windows:5 windows x86 arch:x86

    9046987b4b2f4e2e2000dc16a6b941a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/codecs/qjpcodecs4.dll
    .dll windows:5 windows x86 arch:x86

    e07964dec7282ddf9883045cb2f6e60d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/codecs/qkrcodecs4.dll
    .dll .ps1 windows:5 windows x86 arch:x86 polyglot

    08f405ef31dc972b4351ff01199829da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/codecs/qtwcodecs4.dll
    .dll windows:5 windows x86 arch:x86

    9fd73dacbd996e54eb079353ef1baf1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/iconengines/qsvgicon4.dll
    .dll windows:5 windows x86 arch:x86

    822b03f306d55422e9766de24506c3bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/imageformats/qgif4.dll
    .dll windows:5 windows x86 arch:x86

    bd7079908a276f72f7060c79017964e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    b54ee5e95c7eaf102f89f0db85e20317


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/imageformats/qjpeg4.dll
    .dll windows:5 windows x86 arch:x86

    dbcd8cf609c93fb7d7864c31acfc7ea0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/imageformats/qmng4.dll
    .dll windows:5 windows x86 arch:x86

    7bf929cdf5555c899e8ebde0bd8bc35b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/imageformats/qsvg4.dll
    .dll windows:5 windows x86 arch:x86

    f3535fb91881f0dc8d68731e0dd892d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtPlugins/imageformats/qtiff4.dll
    .dll windows:5 windows x86 arch:x86

    44797b65c09d60ce10cce7dcc27199fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtSql4.dll
    .dll windows:5 windows x86 arch:x86

    6c7d28a1a4bb0e5d7861ddf431aea95e


    Headers

    Imports

    Exports

    Sections

  • QtSvg4.dll
    .dll windows:5 windows x86 arch:x86

    b0410469738f563ffc6993e81e06e473


    Headers

    Imports

    Exports

    Sections

  • QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    6475d0262b3773a086b2a20c4cc8e10e


    Headers

    Imports

    Exports

    Sections

  • Readme.txt
  • Uninstall.exe.nsis
  • celt0.0.11.0.dll
    .dll windows:5 windows x86 arch:x86

    e9efd2da21d82625d072ee81484cc793


    Headers

    Imports

    Exports

    Sections

  • celt0.0.11.0.sse2.dll
    .dll windows:5 windows x86 arch:x86

    40c7d41fac68d3a2b664f380956324e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • celt0.0.7.0.dll
    .dll windows:5 windows x86 arch:x86

    d7b0ff2e296893abf3aa6756421a2935


    Headers

    Imports

    Exports

    Sections

  • celt0.0.7.0.sse2.dll
    .dll windows:5 windows x86 arch:x86

    a5fa0d5b8fd5a0c6addc155248c88862


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    3f5a00ef2a36f3cd8924690a5a1d6f3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    72d90b8f874b89c42fbb53081cf1cb5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmysql.dll
    .dll windows:5 windows x86 arch:x86

    d553f195315fa87f677199f1c563c047


    Headers

    Imports

    Exports

    Sections

  • libprotobuf.dll
    .dll windows:5 windows x86 arch:x86

    1fb235ae17080e4b071a12b1e81dca38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libsndfile-1.dll
    .dll windows:4 windows x86 arch:x86

    8cbca648630973c2233ea697d0b978b9


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • mumble.exe
    .exe windows:5 windows x86 arch:x86

    fc15bd8053bbc0252d6db80aea8379f5


    Headers

    Imports

    Exports

    Sections

  • plugins/aoc.dll
    .dll windows:5 windows x86 arch:x86

    42de4af88acd52dff20d1861226fa41e


    Headers

    Imports

    Exports

    Sections

  • plugins/bf1942.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/bf2.dll
    .dll windows:5 windows x86 arch:x86

    96c6da62133534adbf17e5aa47c2745d


    Headers

    Imports

    Exports

    Sections

  • plugins/bf2142.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/bfheroes.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/cod2.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/cod4.dll
    .dll windows:5 windows x86 arch:x86

    83f1d286e7d04ac6d3051a705046f792


    Headers

    Imports

    Exports

    Sections

  • plugins/cod5.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/codmw2.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/codmw2so.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/css.dll
    .dll windows:5 windows x86 arch:x86

    42de4af88acd52dff20d1861226fa41e


    Headers

    Imports

    Exports

    Sections

  • plugins/dods.dll
    .dll windows:5 windows x86 arch:x86

    42de4af88acd52dff20d1861226fa41e


    Headers

    Imports

    Exports

    Sections

  • plugins/dys.dll
    .dll windows:5 windows x86 arch:x86

    42de4af88acd52dff20d1861226fa41e


    Headers

    Imports

    Exports

    Sections

  • plugins/etqw.dll
    .dll windows:5 windows x86 arch:x86

    83f1d286e7d04ac6d3051a705046f792


    Headers

    Imports

    Exports

    Sections

  • plugins/gmod.dll
    .dll windows:5 windows x86 arch:x86

    42de4af88acd52dff20d1861226fa41e


    Headers

    Imports

    Exports

    Sections

  • plugins/hl2dm.dll
    .dll windows:5 windows x86 arch:x86

    42de4af88acd52dff20d1861226fa41e


    Headers

    Imports

    Exports

    Sections

  • plugins/insurgency.dll
    .dll windows:5 windows x86 arch:x86

    42de4af88acd52dff20d1861226fa41e


    Headers

    Imports

    Exports

    Sections

  • plugins/l4d.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/l4d2.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/link.dll
    .dll windows:5 windows x86 arch:x86

    36587ba3f3748e7f01e790a9c96ceb3f


    Headers

    Imports

    Exports

    Sections

  • plugins/lotro.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/manual.dll
    .dll windows:5 windows x86 arch:x86

    4530639d2509ea5683a765fb84fc4fe8


    Headers

    Imports

    Exports

    Sections

  • plugins/tf2.dll
    .dll windows:5 windows x86 arch:x86

    cd3ba023f521148eb827eb4cb176e8b0


    Headers

    Imports

    Exports

    Sections

  • plugins/ut2004.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/ut3.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/wolfet.dll
    .dll windows:5 windows x86 arch:x86

    94ad8c3b300bea78f201e768d1962039


    Headers

    Imports

    Exports

    Sections

  • plugins/wow.dll
    .dll windows:5 windows x86 arch:x86

    5390ef6f6d51770def68a648308941fa


    Headers

    Imports

    Exports

    Sections

  • qt.conf
  • qt.txt
  • speex.dll
    .dll windows:5 windows x86 arch:x86

    cf72f9f03196cdf78ed5e8660ac4edb6


    Headers

    Imports

    Exports

    Sections

  • speex.txt
  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    61437893e5641c8229864df1efb8afa4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    07761085e6d5abbc4cbf0976d6b9a264


    Headers

    Imports

    Exports

    Sections