General

  • Target

    5caef375d2396c7361b49f02b3400890_JaffaCakes118

  • Size

    5.6MB

  • MD5

    5caef375d2396c7361b49f02b3400890

  • SHA1

    4ef7a0b78276ce2ed6724a5d12d69bed849f58ca

  • SHA256

    c02469dec1bf393a5e6068a8d74bdf7ff05679b93bd5e0efd786c161992f0204

  • SHA512

    b3e67fddbfd1617e079d9bd0cfa0de7add518111b3b68f8b040fad5311d418643a12a4617890fb0716fa5ca0c5bfeddd481ae0effbca5cf2916be94879fd8fb4

  • SSDEEP

    98304:Fkrr1LlI0o7Xd8AArNqIlzBymd1NfB2NFYEiYerxxw0GMeOiet:S/1LlyNA8IltZNINFwxrTGMeOi8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5caef375d2396c7361b49f02b3400890_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    ea4e67a31ace1a72683a99b80cf37830


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    e269b6260a93a17ceff5184b3982ded8


    Headers

    Imports

    Exports

    Sections

  • Bugsnag.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ControlzEx.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DynamicData.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Google.Apis.Auth.PlatformServices.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Google.Apis.Auth.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Google.Apis.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Google.Apis.Oauth2.v2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Google.Apis.PlatformServices.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Google.Apis.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Hardcodet.Wpf.TaskbarNotification.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • KillProc.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • MahApps.Metro.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Xaml.Behaviors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NHotkey.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NHotkey.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Onova.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PocoCrypto64.dll
    .dll windows:6 windows x64 arch:x64

    0322cfb428597b7f3aa38e265f7b0aa7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoData64.dll
    .dll windows:6 windows x64 arch:x64

    4af0a33e6f6e854e154a6a3db5158960


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoDataSQLite64.dll
    .dll windows:6 windows x64 arch:x64

    3a5f942004da068c1f24bd8f027d4df5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoFoundation64.dll
    .dll windows:6 windows x64 arch:x64

    c300ec863575d1ea2200249f675cb769


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoJSON64.dll
    .dll windows:6 windows x64 arch:x64

    56bd9809e334c55d47d1e81d401108ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoNet64.dll
    .dll windows:6 windows x64 arch:x64

    8f963ed108aa8ac0d24b8efb593cb9c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoNetSSL64.dll
    .dll windows:6 windows x64 arch:x64

    4c6cb237f79d32c2cfeae9273649e4e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoUtil64.dll
    .dll windows:6 windows x64 arch:x64

    bc26c146a20c2cd74e57c930a065ad1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PocoXML64.dll
    .dll windows:6 windows x64 arch:x64

    e37a4152fbc4129c488bde6761a3abb4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ReactiveUI.Fody.Helpers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ReactiveUI.Validation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ReactiveUI.WPF.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ReactiveUI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Splat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Reactive.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.WindowsRuntime.UI.Xaml.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.WindowsRuntime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TogglDesktop.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • TogglDesktop.exe.config
    .xml
  • TogglDesktopDLL.dll
    .dll windows:6 windows x64 arch:x64

    4f425e970ce6433aa8f3c0da9543c1d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    e269b6260a93a17ceff5184b3982ded8


    Headers

    Imports

    Exports

    Sections

  • KillProc.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • cacert.pem
  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    1f2ced229d00caebef7adc68116bc43d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto.dll
    .dll windows:6 windows x64 arch:x64

    081a1bb285d30f14be4ef39abb08ea79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl.dll
    .dll windows:6 windows x64 arch:x64

    34c81ce4f445752a0109fbd2a32af92b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    9f90f4f6326a9c35b4bab90a30c16d60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    1c5fbe0b22e55c37d4d82cd54085dd74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    f6348196fa0582c1d1eac37aafe5810b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • toggl.ico
  • vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    323ab05df2f1c9e54b6b460d7d5bc715


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    2cb5da5225e972a08f32d04b8085dc7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    451bdabc0299e6b9dc317480ef12c3dc


    Code Sign

    Headers

    Imports

    Exports

    Sections