General

  • Target

    65c5ea1ebbf5cb6b2df90edf4e220099_JaffaCakes118

  • Size

    13.7MB

  • MD5

    65c5ea1ebbf5cb6b2df90edf4e220099

  • SHA1

    951e2b02a242676160550a28c8c1b4e709b48f4c

  • SHA256

    9d6ed95597857927f0e7e6eb1495c4ec10fa74aced7efbc9199c4392be7585a6

  • SHA512

    a79d36b437d20e7bd5ecdc65dd77a00513277276e52d72651999e18f4e1d537a2e921d738a40efee9869acb2f056df4b7e591541b5401354dbdcc52f2e48401a

  • SSDEEP

    393216:q9n5iYmtRNVb1jwYN7QQ04yZDb8n53MGWq/u:q95i/tRNVb9wyQ7zoebH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 65c5ea1ebbf5cb6b2df90edf4e220099_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9bca2c7cb3bba360100a3a7a510fe11d


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/EstUrl.dll
    .dll windows:4 windows x86 arch:x86

    5eebff966e82adb38fe32cb21b559567


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    222ba14d7b8ae575c32dd0b8b77a5dea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    34e265a7f45a5a54be208d4166ec2423


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    88d8a4a9c21e345682f6b1fac45c4679


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    f9dfb8ff6a049e4feb3afa5b7a47b099


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsWeb2.dll
    .dll windows:4 windows x86 arch:x86

    082c20552519a39cb8a90624898536df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/workerExtension.dll
    .dll windows:4 windows x86 arch:x86

    fbe3de162591df9b3dad4605ffd762a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/zumlib.dll
    .dll windows:5 windows x86 arch:x86

    6e21ecf5c7fd20210740626c966c0125


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/ESTsoft/ALUpdate/$R6
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/ESTsoft/Common/ezt.exe
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $R6
    .dll regsvr32 windows:5 windows x86 arch:x86

    22d4f9aca50cebaa5f771f0134d48e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZip.exe
    .exe windows:5 windows x86 arch:x86

    da878adf4357beb4a8d9e41f887db221


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZipCon.exe
    .exe windows:5 windows x86 arch:x86

    be6ef575a3d572fe8c4e9674365b3634


    Code Sign

    Headers

    Imports

    Sections