General

  • Target
    658f78184be7051163d1b46cec615012_JaffaCakes118
  • Size 16.9MB
  • Sample240522-b4grwsgc75
  • SHA256 df5b4f8f0a459bb640a2a42028d9c9afd048d136ae98583d4040b01b07260167
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • 658f78184be7051163d1b46cec615012_JaffaCakes118
    .exe 16.9MB
  • $PLUGINSDIR/EstUrl.dll
    .dll 181KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 10KB
  • $PLUGINSDIR/inetc.dll
    .dll 151KB
  • $PLUGINSDIR/modern-header.bmp
    3KB
  • $PLUGINSDIR/nsWeb2.dll
    .dll 197KB
  • $PLUGINSDIR/stext/estci_l.bmp
    3KB
  • $PLUGINSDIR/workerExtension.dll
    .dll 549KB
  • $PLUGINSDIR/zumlib.dll
    .dll 85KB
  • $PROGRAMFILES/ESTsoft/ALUpdate/$R6
    .exe 98KB
  • $PROGRAMFILES/ESTsoft/Common/ezt.exe
    .exe 98KB
  • $R6
    .exe 8.0MB

658f78184be7051163d1b46cec615012_JaffaCakes118

  • IMPHASH 9bca2c7cb3bba360100a3a7a510fe11d
  • SHA256 df5b4f8f0a459bb640a2a42028d9c9afd048d136ae98583d4040b01b07260167
  • MD5 SHA1 SHA512 SSDEEP
Digest
37:2f:94:9b:9e:f9:31:f0:0e:64:9b:e4:1e:d0:fb:09:fe:41:46:6f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=ESTsoft Corp.,O=ESTsoft Corp.,L=Seocho-gu,ST=Seoul,C=KR
Minor OS version
0
Major OS version
4
Entry point
13439
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths