General

  • Target

    4dbc2f0be9041fec1436c7062433da0f_JaffaCakes118

  • Size

    1.8MB

  • MD5

    4dbc2f0be9041fec1436c7062433da0f

  • SHA1

    b07978efc5782ccd238a9311b3594a4bc4577cea

  • SHA256

    4f64d1caed69ca071294176e6522aa94df8a82a8806a5f92c95a936a66519e09

  • SHA512

    ecb67103d366a1d503c49cfb68901b75dc15cf973dc1df3456dced48c76f4c7a2b90f79c8112653e665982547cd7a0485750478c2b94b5a8a4ad6dc82406d49a

  • SSDEEP

    49152:5xfzOGA0wdFlnow2Rf5JhDxaWDCEhkPN8/hTYgduifV:Trhwdnow21vhlaW2EeldQZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 4dbc2f0be9041fec1436c7062433da0f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • fancysetup.exe
    .exe windows:5 windows x86 arch:x86

    048a340df05666d3be0bf17d2023f2b5


    Code Sign

    Headers

    Imports

    Sections

  • iconAnimate.exe
    .exe windows:5 windows x86 arch:x86

    103dc9ee7ff553cbd149bd78b2114618


    Code Sign

    Headers

    Imports

    Sections

  • iconTips.exe
    .exe windows:5 windows x86 arch:x86

    c14fdecedcfdb4bcc3211f33330ca78e


    Code Sign

    Headers

    Imports

    Sections

  • lander.ini
  • lz_dzz.exe
    .exe windows:5 windows x86 arch:x86

    b93ea9a17f1027d6430469f72f6cd471


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WizModernImage.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections