General

  • Target

    5e3fd8b45e25995a13089f6a9b9e927c_JaffaCakes118

  • Size

    27.9MB

  • MD5

    5e3fd8b45e25995a13089f6a9b9e927c

  • SHA1

    f96a70f627f988a1b292851daf4548cd83588882

  • SHA256

    6e18eb1cbcd3c5e0aa3fb219fd80a687205e64c05282adc00f5f77e9e9aed93e

  • SHA512

    9498a380f75b6df5b884fcfb7515ce843103fb8ad84f1cee12653e72d069593b069e8a2d2f75c39a5320cc47915d0dc2a2cdfec36a419aa75b86f70a08cf9d45

  • SSDEEP

    786432:zSLM1a4m7T+n8tCWq1uUrW0USfAAxfFpI84XuGnUB30Gqm2Uxmt+:pr8T+60AIW0A+FpI8OuGUYmjmt+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 46 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5e3fd8b45e25995a13089f6a9b9e927c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/AccessibleMarshal.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    8a3b3813aabf01aaa7383a46666a153e


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/D3DCompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/Geckofx-Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/Geckofx-Winforms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/IA2Marshal.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    8495dc09368a89c68cd7b780d5a5712a


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/Newtonsoft.Json.xml
    .xml
  • $APPDATA/notepad3k/Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/breakpadinjector.dll
    .dll windows:5 windows x86 arch:x86

    0fecd516fb80e5e952fcf3fbc9e8af83


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/crashreporter.exe
    .exe windows:5 windows x86 arch:x86

    f8a190f86686ce8f6562a164f23c91e0


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/crashreporter.ini
  • $APPDATA/notepad3k/d3dcompiler_46.dll
    .dll windows:6 windows x86 arch:x86

    876b48ac5a1cad7160b32c8df9ab9938


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/dependentlibs.list
  • $APPDATA/notepad3k/dictionaries/en-US.aff
  • $APPDATA/notepad3k/dictionaries/en-US.dic
  • $APPDATA/notepad3k/freebl3.chk
  • $APPDATA/notepad3k/freebl3.dll
    .dll windows:5 windows x86 arch:x86

    6cbe60b3478ec62e73e4c2d17fe32d0f


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/gkmedias.dll
    .dll windows:5 windows x86 arch:x86

    5171ecb37eebbac83741d1ce58f93b73


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/gmp-fake/1.0/fake.dll
    .dll windows:5 windows x86 arch:x86

    d238ed0aee5d39d1c178567584100a4d


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/gmp-fake/1.0/fake.info
  • $APPDATA/notepad3k/icudt52.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $APPDATA/notepad3k/icuin52.dll
    .dll windows:5 windows x86 arch:x86

    edae6dc275baad37618943e343f54b0e


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/icuuc52.dll
    .dll windows:5 windows x86 arch:x86

    6cc942a4acc2dbe896d1750fd186fda4


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/js-gdb.py
  • $APPDATA/notepad3k/js.exe
    .exe windows:5 windows x86 arch:x86

    ad11607ff56f8d6549631edeee235568


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    5537ca922ba408f6e451455e81513471


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    87c1a5d38a8ef0fbc1c42214c980f6a7


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/mozalloc.dll
    .dll windows:5 windows x86 arch:x86

    256fe11c5b5936f52e7cbcf834dbb2e3


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/mozglue.dll
    .dll windows:5 windows x86 arch:x86

    9fcd81242b2e2c29d8031fb21f159d97


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/mozjs.dll
    .dll windows:5 windows x86 arch:x86

    ae7b12de867e3887f670abfe8f3ca4af


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/notepad3k.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/noteupd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/nss3.dll
    .dll windows:5 windows x86 arch:x86

    64d957e873b4c75636ea3b036a1a1755


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/nssckbi.dll
    .dll windows:5 windows x86 arch:x86

    009de9c3e47cb0d9137ef956b714a709


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/nssdbm3.chk
  • $APPDATA/notepad3k/nssdbm3.dll
    .dll windows:5 windows x86 arch:x86

    348c2b582d9cd8a2ae7b6a92b24d8a84


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/omni.ja
  • $APPDATA/notepad3k/platform.ini
  • $APPDATA/notepad3k/plugin-container.exe
    .exe windows:5 windows x86 arch:x86

    ad1dfb9f2f66b2bdd2aa87b787ed58cf


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/plugin-hang-ui.exe
    .exe windows:5 windows x86 arch:x86

    2c63429b6dadfa72bc40e30909fb7cc8


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/precomplete
  • $APPDATA/notepad3k/redit.exe
    .exe windows:5 windows x86 arch:x86

    6adc273c3fd450f883df95dc9163ed34


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/sandboxbroker.dll
    .dll windows:5 windows x86 arch:x86

    c6f2b7c9cbe8ece277e7c13764b8b05a


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/softokn3.chk
  • $APPDATA/notepad3k/softokn3.dll
    .dll windows:5 windows x86 arch:x86

    401920c3529ab75c93ffd05b66edba66


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/updater.exe
    .exe windows:5 windows x86 arch:x86

    8c983c708e2fb686fc6d323a3e3818b2


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/xul.dll
    .dll windows:5 windows x86 arch:x86

    17e028a3a1695cc094c18edeaea229f0


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/notepad3k/xulrunner-stub.exe
    .exe windows:5 windows x86 arch:x86

    a0d2b01b564eb4508070b50c0afe1c6d


    Headers

    Imports

    Sections

  • $APPDATA/notepad3k/xulrunner.exe
    .exe windows:5 windows x86 arch:x86

    0dd8d9a4aace6b7d2d6a46dba5f6bfdd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    f37508ca6a0ae390632a5406dd7e06d3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/liteFirewall.dll
    .dll windows:5 windows x86 arch:x86

    d581909bbb46b6bf2b16e48b9e3dd1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections