General

  • Target

    654e8b224a9e90ba0f239dda1cad5148_JaffaCakes118

  • Size

    19.3MB

  • MD5

    654e8b224a9e90ba0f239dda1cad5148

  • SHA1

    3292a3f8cdd5a42ff63c3b85b8f150fe4a3fa07a

  • SHA256

    3c3cf3d710582ccbb7a45139c1acc3a8d6bcfc017b9a4aeae6bf34a292f057cd

  • SHA512

    a881c08953acf37e0713fa4905a91efdf75be08d118b1c053b49697e7a16eb1a9adc8175c723914e3ac6cee53693329b10db151694dd9f1bfcda4551bb933ee8

  • SSDEEP

    393216:lbLBjVnsPkCFAleD+X0CPGcC4TeuPgnBiE/3hi:lb9xpeqX1PGaTVgBr/g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • 654e8b224a9e90ba0f239dda1cad5148_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Carambis/Cleaner/data/lang/crashrpt_lang_DE.ini
  • $LOCALAPPDATA/Carambis/Cleaner/data/lang/crashrpt_lang_EN.ini
  • $LOCALAPPDATA/Carambis/Cleaner/data/lang/crashrpt_lang_ES.ini
  • $LOCALAPPDATA/Carambis/Cleaner/data/lang/crashrpt_lang_FR.ini
  • $LOCALAPPDATA/Carambis/Cleaner/data/lang/crashrpt_lang_IT.ini
  • $LOCALAPPDATA/Carambis/Cleaner/data/lang/crashrpt_lang_JP.ini
  • $LOCALAPPDATA/Carambis/Cleaner/data/lang/crashrpt_lang_RU.ini
  • $PLUGINSDIR/ElevatePrivileges.dll
    .dll windows:5 windows x86 arch:x86

    47fda6a58e505d04d9a4fa8b292bae67


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Registry.dll
    .dll windows:5 windows x86 arch:x86

    0c4ab0a88a7d1d5d2bec9bf180354b2f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SaveInExe.dll
    .dll windows:5 windows x86 arch:x86

    b8998bc7a2067cbf38d42e3697f68613


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installer_translate.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/downloader.exe
    .exe windows:5 windows x86 arch:x86

    f25b1178b625abaadee5f4c1fcd7fde0


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • CleanerServiceInstaller.exe
    .exe windows:5 windows x86 arch:x86

    8ea84d3190cbaa6b655237e189da86e9


    Headers

    Imports

    Sections

  • CrashRpt1402.dll
    .dll windows:5 windows x86 arch:x86

    aebc65e56b242a08e7f6625663073acb


    Headers

    Imports

    Exports

    Sections

  • CrashSender1402.exe
    .exe windows:5 windows x86 arch:x86

    e8d576aa8da5174627b0f9d11cb1fc23


    Headers

    Imports

    Sections

  • Qt5Core.dll
    .dll windows:5 windows x86 arch:x86

    f5ece4ae30b11b01e99325556c603169


    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:5 windows x86 arch:x86

    51004c06d7da28641562b447acebd909


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:5 windows x86 arch:x86

    24146a2fa4c56cf1baee9aac768eb1b2


    Headers

    Imports

    Exports

    Sections

  • Qt5Sql.dll
    .dll windows:5 windows x86 arch:x86

    c943828eba840868e68aed13c540b322


    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:5 windows x86 arch:x86

    c24dd1378e78ed0ac514f0fd68e1c3ae


    Headers

    Imports

    Exports

    Sections

  • UpdateProgress.exe
    .exe windows:5 windows x86 arch:x86

    7f2504a6b4775798b3f1dd294c5b0620


    Headers

    Imports

    Sections

  • avcodec-55.dll
    .dll windows:5 windows x86 arch:x86

    3171179b56dd61f61b93f4f29f1589e0


    Headers

    Imports

    Exports

    Sections

  • avformat-55.dll
    .dll windows:5 windows x86 arch:x86

    881c8936b14f0af34e5ebba3f5ccdcf4


    Headers

    Imports

    Exports

    Sections

  • avutil-52.dll
    .dll windows:5 windows x86 arch:x86

    be83af9d739ad3501805ebe6f657639e


    Headers

    Imports

    Exports

    Sections

  • chromaprint.dll
    .dll windows:5 windows x86 arch:x86

    238a0cdef2731907d4eb5c2e0670c33e


    Headers

    Imports

    Exports

    Sections

  • cleaner.exe
    .exe windows:5 windows x86 arch:x86

    6ceebe8ff391178d6bb409daeb882017


    Code Sign

    Headers

    Imports

    Sections

  • dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    3f5a00ef2a36f3cd8924690a5a1d6f3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:5 windows x86 arch:x86

    3b52f44bf940717b1620ab53e0ecee9f


    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:5 windows x86 arch:x86

    2c7e7b01901a7b41207c3c4544376e49


    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    6ffcf0ab5d5f48563cba8f472b73bf14


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    ef2045d54d6b2a1c69b5e9b69c4c2607


    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:5 windows x86 arch:x86

    92f0212f885b7b60c72d5c3b9f0a5ed7


    Headers

    Imports

    Exports

    Sections

  • qjson.dll
    .dll windows:5 windows x86 arch:x86

    5f2a1137fa4851574836022329187caa


    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlite.dll
    .dll windows:5 windows x86 arch:x86

    779e81a9f868a2f931c33b07511d43fb


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ElevatePrivileges.dll
    .dll windows:5 windows x86 arch:x86

    47fda6a58e505d04d9a4fa8b292bae67


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installer_translate.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections