General

  • Target

    6554571360f8c1385fb246d9e2845c2c_JaffaCakes118

  • Size

    1013KB

  • MD5

    6554571360f8c1385fb246d9e2845c2c

  • SHA1

    25908f7c8f962f8cd0bbb322dfa86bbbe5b979f4

  • SHA256

    1d14500a00d5f63a796ae8002eaacb21ee3feb348ab52f3d74c85c0f914347c5

  • SHA512

    8fa9155d6e7b065cdcdb72399c521a278da447994c583f3e349238bea53a5aebc014cdfee2f35f8ed59bd6d55d84cb9ad407044f0d8a7b1c2a550c07a78dbb7a

  • SSDEEP

    24576:dUx3bdywNuJA0g/2i4FmwKGpsAqCwoMZeZCkbx+HHP4V:dU3yiuePui4ItGpsAqC28gkbQHC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 6554571360f8c1385fb246d9e2845c2c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bin/FAXVIEW.EXE
    .exe windows:4 windows x86 arch:x86

    0a6bc9b1abc6bb7044e3167c57d63146


    Headers

    Imports

    Sections

  • bin/MFC42.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a1581f1284d59a8a21a8782a38a2fea1


    Headers

    Imports

    Exports

    Sections

  • bin/MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • bin/Usr.dll
    .dll windows:4 windows x86 arch:x86

    1e59a43510755bf4d17e8ba28def877d


    Headers

    Imports

    Exports

    Sections

  • bin/XFAX.EXE
    .exe windows:4 windows x86 arch:x86

    53ed13f6f76ffc9956527d6bf370e75e


    Headers

    Imports

    Sections

  • bin/XOUT.EXE
    .exe windows:4 windows x86 arch:x86

    d87275d5526d9be31101efa9507af999


    Headers

    Imports

    Sections

  • bin/setp.exe
    .exe windows:4 windows x86 arch:x86

    e6acbecb3d36515f60078f6962f8e96d


    Headers

    Imports

    Sections

  • bin/xMsx.exe
    .exe windows:4 windows x86 arch:x86

    aeaadd27e9e20a95b0e32825de53bf31


    Headers

    Imports

    Sections

  • bin/xMsx2.exe
    .exe windows:4 windows x86 arch:x86

    5da5db430b634abce690a8ef68c18cbd


    Headers

    Imports

    Sections

  • bin/xPrn.exe
    .exe windows:4 windows x86 arch:x86

    e53f1236f41133150ffb0e9d273c9f74


    Headers

    Imports

    Sections

  • bin/xScan.exe
    .exe windows:4 windows x86 arch:x86

    9b6e1160980fa1817c209daab79e6721


    Headers

    Imports

    Sections

  • db/CODE.INI
  • db/DATAID.DAT
  • db/GRPID.DAT
  • db/JOB.db
  • db/JOBID.DAT
  • db/LNKID.DAT
  • db/QUE.db
  • db/QUEID.DAT
  • db/SCANNER.INI
  • db/SYS.db
  • db/SYSINFO.DB
  • db/TEMPID.DAT
  • db/UPDATE.DAT
  • db/USRID.DAT
  • db/_system_/LOGIN.db
  • db/_system_/SCANNER.INI
  • db/_system_/editor.ini
  • db/_system_/grp.db
  • db/_system_/info.db
  • db/_system_/lnk.db
  • db/_system_/usr.db
  • db/bossID.dat
  • db/dd.txt
  • db/info.db
  • db/loginID.dat
  • db/que01.db
  • db/que02.db
  • db/que03.db
  • db/que04.db
  • db/que05.db
  • db/que06.db
  • db/que07.db
  • db/que08.db
  • db/que09.db
  • db/que10.db
  • db/que11.db
  • db/que12.db
  • db/que13.db
  • db/que14.db
  • db/que15.db
  • db/que16.db
  • db/que17.db
  • db/que18.db
  • db/que19.db
  • db/que20.db
  • db/que21.db
  • db/que22.db
  • db/que23.db
  • db/que24.db
  • db/que25.db
  • db/que26.db
  • db/que27.db
  • db/que28.db
  • db/que29.db
  • db/que30.db
  • db/que31.db
  • doc/TEMP.DAT
  • drvw7/AddPort.exe
    .exe windows:5 windows x86 arch:x86

    b88b8a03daf7c86a3350036af74c3c17


    Headers

    Imports

    Sections

  • drvw7/FaxDriver/AMD64/ifax_bitmap.dll
    .dll windows:6 windows x64 arch:x64

    99daf4623f419b215ca2c7ba09ef4ccf


    Headers

    Imports

    Exports

    Sections

  • drvw7/FaxDriver/IA64/ifax_bitmap.dll
  • drvw7/FaxDriver/STDNAMES.GPD
  • drvw7/FaxDriver/i386/ifax_bitmap.dll
    .dll windows:6 windows x86 arch:x86

    74db2629b0bf6511946d9243af6fff5f


    Headers

    Imports

    Exports

    Sections

  • drvw7/FaxDriver/ifax_bitmap.gpd
  • drvw7/FaxDriver/ifax_bitmap1.gpd
  • drvw7/FaxDriver/x86/ifax_bitmap.dll
    .dll windows:6 windows x86 arch:x86

    74db2629b0bf6511946d9243af6fff5f


    Headers

    Imports

    Exports

    Sections

  • drvw7/STDNAMES.GPD
  • drvw7/StrongFax.inf
  • drvw7/StrongFax.ini
  • drvw7/ifax_bitmap.gpd
  • drvw7/ifax_bitmap1.gpd
  • temp/TEMP.DAT
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • win/xDx.exe
    .exe windows:4 windows x86 arch:x86

    130f452898ca48acf6b1e1fee7d9b1b0


    Headers

    Imports

    Sections

  • win/xTwn.exe
    .exe windows:4 windows x86 arch:x86

    3ec8eb4c092e65462b73b3123293cd23


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.