Overview

overview

7

Static

static

3

4f44571fee...18.exe

windows7-x64

7

4f44571fee...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

License.rtf

windows7-x64

4

License.rtf

windows10-2004-x64

1

Plugins/Hi...tml.js

windows7-x64

3

Plugins/Hi...tml.js

windows10-2004-x64

3

Plugins/Hi...Txt.js

windows7-x64

3

Plugins/Hi...Txt.js

windows10-2004-x64

3

QTranslate.exe

windows7-x64

1

QTranslate.exe

windows10-2004-x64

1

Services/A...ice.js

windows7-x64

3

Services/A...ice.js

windows10-2004-x64

3

Services/B...ice.js

windows7-x64

3

Services/B...ice.js

windows10-2004-x64

3

Services/B...ice.js

windows7-x64

3

Services/B...ice.js

windows10-2004-x64

3

Services/B...ice.js

windows7-x64

3

Services/B...ice.js

windows10-2004-x64

3

Services/Common.js

windows7-x64

3

Services/Common.js

windows10-2004-x64

3

Services/D...ice.js

windows7-x64

3

Services/D...ice.js

windows10-2004-x64

3

Services/G...ice.js

windows7-x64

3

Services/G...ice.js

windows10-2004-x64

3

Services/G...ice.js

windows7-x64

3

Services/G...ice.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f44571fee7e78cde876aac4a1972dd1_JaffaCakes118

  • Size

    489KB

  • MD5

    4f44571fee7e78cde876aac4a1972dd1

  • SHA1

    6c205ef7cf887c05565ce764bf4ec5aa0e2fb4df

  • SHA256

    f9cf94ef7c1719af9dc2858cf42acbb1c00f3546b41a9af0cdeb3b47878b9ab4

  • SHA512

    0950023d0c03089f2a2206795e85ee01899b5fb50e37d2f8e8b7bbbbe7c93bf944782143ccc709fe148d9ddb0a3d2bfdd230bf590633343e7cc6284422fa1a9c

  • SSDEEP

    12288:A8VlK/qiIgkerR1uBfN8PWF4/da3z3uokz3HF:A8VvnRxFa8q3HF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 4f44571fee7e78cde876aac4a1972dd1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • License.rtf
    .rtf
  • Locales/Arabic/help.txt
  • Locales/Arabic/lang.json
  • Locales/Bulgarian/help.txt
  • Locales/Bulgarian/lang.json
  • Locales/Chinese (Simplified)/help.txt
  • Locales/Chinese (Simplified)/lang.json
  • Locales/Chinese (Traditional)/help.txt
  • Locales/Chinese (Traditional)/lang.json
  • Locales/Czech/help.txt
  • Locales/Czech/lang.json
  • Locales/Dutch/help.txt
  • Locales/Dutch/lang.json
  • Locales/English/help.txt
  • Locales/English/lang.json
  • Locales/Finnish/help.txt
  • Locales/Finnish/lang.json
  • Locales/French/help.txt
  • Locales/French/lang.json
  • Locales/German/help.txt
  • Locales/German/lang.json
  • Locales/Greek/help.txt
  • Locales/Greek/lang.json
  • Locales/Hungarian/help.txt
  • Locales/Hungarian/lang.json
  • Locales/Italian/help.txt
  • Locales/Italian/lang.json
  • Locales/Japanese/help.txt
  • Locales/Japanese/lang.json
  • Locales/Korean/help.txt
  • Locales/Korean/lang.json
  • Locales/Polish/help.txt
  • Locales/Polish/lang.json
  • Locales/Portuguese (Brazilian)/help.txt
  • Locales/Portuguese (Brazilian)/lang.json
  • Locales/Russian/help.txt
  • Locales/Russian/lang.json
  • Locales/Serbian/help.txt
  • Locales/Serbian/lang.json
  • Locales/Slovak/help.txt
  • Locales/Slovak/lang.json
  • Locales/Slovenian/help.txt
  • Locales/Slovenian/lang.json
  • Locales/Spanish/help.txt
  • Locales/Spanish/lang.json
  • Locales/Swedish/help.txt
  • Locales/Swedish/lang.json
  • Locales/Turkish/help.txt
  • Locales/Turkish/lang.json
  • Locales/Ukrainian/help.txt
  • Locales/Ukrainian/lang.json
  • Plugins/History/Html.js
  • Plugins/History/Txt.js
  • QTranslate.exe
    .exe windows:5 windows x86 arch:x86

    ff7738230d6604abe0974dc82b6242ab


    Headers

    Imports

    Sections

  • Services/ABBYY Lingvo/Service.ico
  • Services/ABBYY Lingvo/Service.js
    .js
  • Services/Babylon Dictionary/Service.ico
  • Services/Babylon Dictionary/Service.js
  • Services/Babylon/Service.ico
  • Services/Babylon/Service.js
    .js
  • Services/Baidu/Service.ico
  • Services/Baidu/Service.js
    .js
  • Services/Common.js
    .js
  • Services/Definr/Service.ico
  • Services/Definr/Service.js
    .js
  • Services/Google Search/Service.ico
  • Services/Google Search/Service.js
    .js
  • Services/Google Translate/Service.ico
  • Services/Google Translate/Service.js
    .js
  • Services/ImTranslator/Service.ico
  • Services/ImTranslator/Service.js
  • Services/Microsoft Translator/Service.ico
  • Services/Microsoft Translator/Service.js
    .js
  • Services/Multitran/Service.ico
  • Services/Multitran/Service.js
    .js
  • Services/Promt/Service.ico
  • Services/Promt/Service.js
    .js
  • Services/Reverso/Service.ico
  • Services/Reverso/Service.js
    .js
  • Services/SDL/Service.ico
  • Services/SDL/Service.js
  • Services/Urban Dictionary/Service.ico
  • Services/Urban Dictionary/Service.js
    .js
  • Services/Wikipedia/Service.ico
  • Services/Wikipedia/Service.js
    .js
  • Services/WordReference/Service.ico
  • Services/WordReference/Service.js
    .js
  • Services/Yandex/Service.ico
  • Services/Yandex/Service.js
    .js
  • Services/youdao/Service.ico
  • Services/youdao/Service.js
    .js
  • Themes/Blue.json
  • Themes/Brackets.json
  • Themes/Flat Dark.json
  • Themes/Holo Dark.json
  • Themes/Holo Light.json
  • Themes/Metro.json
  • Themes/Outlook Gray.json
  • Themes/Photoshop Dark.json
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections