General

  • Target

    6cb6db3de6a7d726aaba664e182764be_JaffaCakes118

  • Size

    19.1MB

  • MD5

    6cb6db3de6a7d726aaba664e182764be

  • SHA1

    4783af9a00704bbf944fabdd0e5ccfd506c84182

  • SHA256

    43049b5eb8d97323975fa23c538994321df9dce4af44d9cb8f176e86d687fa3f

  • SHA512

    5cafbb70aaf84958b8c57d38de42a822af6d3012d060e359958d97fea2894b1a106853e6b96ed3c86bf0e6056a99a3b86b533514515d3fb16111fc9934586560

  • SSDEEP

    393216:4YHHh+0Fpbg5HUFxflYVTMWLxrBPj4gCD7XX60Mt9aFRMs:XYcpbuGflYZPiHnEt9abMs

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 2 IoCs
  • Unsigned PE 49 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 6cb6db3de6a7d726aaba664e182764be_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • EpubeeMagic.exe
    .exe windows:4 windows x86 arch:x86

    2c30bf74d68b0a383069a698b8a02bd5


    Headers

    Imports

    Sections

  • main.pyc
  • EpubeeMagic.exe.manifest
    .xml
  • Include/pyconfig.h
  • LIBEAY32.dll
    .dll windows:5 windows x86 arch:x86

    8854f076f54b914555538520497b053d


    Headers

    Imports

    Exports

    Sections

  • MSVCP100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVCR100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PyQt4.QtCore.pyd
    .dll windows:5 windows x86 arch:x86

    c14c398dd7b5cfa05e84c13e3f1eb10b


    Headers

    Imports

    Exports

    Sections

  • PyQt4.QtGui.pyd
    .dll windows:5 windows x86 arch:x86

    ed3bf6e1d6131b1c1723f845b32e2fd4


    Headers

    Imports

    Exports

    Sections

  • PyQt4.QtNetwork.pyd
    .dll windows:5 windows x86 arch:x86

    8e01dcc37d9b2f1062a3e4b9a78b8c0b


    Headers

    Imports

    Exports

    Sections

  • PyQt4.QtWebKit.pyd
    .dll windows:5 windows x86 arch:x86

    2b0a3ffe478646a110a3a5dd51e647b6


    Headers

    Imports

    Exports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    36ef8abfd3db4f1da2894ef8fddd5ef0


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    8a73d17ebc459f0b0ef5ae0515a7ba6f


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    66aa537c75d6d6bd51562476ebf55fc9


    Headers

    Imports

    Exports

    Sections

  • QtOpenGL4.dll
    .dll windows:5 windows x86 arch:x86

    92be6c6ed94229c812c25273a1249cb6


    Headers

    Imports

    Exports

    Sections

  • QtSvg4.dll
    .dll windows:5 windows x86 arch:x86

    8e520e41471d836f54d6c3d96e069ac4


    Headers

    Imports

    Exports

    Sections

  • QtWebKit4.dll
    .dll windows:5 windows x86 arch:x86

    b55a1f6c1c8beacf6b60a4dc7ffd6a2f


    Headers

    Imports

    Exports

    Sections

  • QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    b9b8c1519a36cba96744b258f38e7e7c


    Headers

    Imports

    Exports

    Sections

  • SSLEAY32.dll
    .dll windows:5 windows x86 arch:x86

    00d1897bd7e457a625ab6f3e8726bd09


    Headers

    Imports

    Exports

    Sections

  • _bz2.pyd
    .dll windows:5 windows x86 arch:x86

    1144b45b39656469503a9c517deff4fb


    Headers

    Imports

    Exports

    Sections

  • _ctypes.pyd
    .dll windows:5 windows x86 arch:x86

    acc7a15675979e1bb3298e16aecbb34f


    Headers

    Imports

    Exports

    Sections

  • _hashlib.pyd
    .dll windows:5 windows x86 arch:x86

    b2aed5ed803462252af6fda6f20980fd


    Headers

    Imports

    Exports

    Sections

  • _lzma.pyd
    .dll windows:5 windows x86 arch:x86

    cd1f1ac2a105cdc28d70746e625e6dfa


    Headers

    Imports

    Exports

    Sections

  • _socket.pyd
    .dll .js windows:5 windows x86 arch:x86 polyglot

    e383dec1c760c39c6e88305da21dd8f7


    Headers

    Imports

    Exports

    Sections

  • _ssl.pyd
    .dll windows:5 windows x86 arch:x86

    a06529bf96457400394751f1ed655a48


    Headers

    Imports

    Exports

    Sections

  • base_library.zip
    .zip
  • _bootlocale.pyc
  • _collections_abc.pyc
  • _weakrefset.pyc
  • abc.pyc
  • codecs.pyc
  • collections/__init__.pyc
  • collections/__main__.pyc
  • collections/abc.pyc
  • copyreg.pyc
  • encodings/__init__.pyc
  • encodings/aliases.pyc
  • encodings/ascii.pyc
  • encodings/base64_codec.pyc
  • encodings/big5.pyc
  • encodings/big5hkscs.pyc
  • encodings/bz2_codec.pyc
  • encodings/charmap.pyc
  • encodings/cp037.pyc
  • encodings/cp1006.pyc
  • encodings/cp1026.pyc
  • encodings/cp1125.pyc
  • encodings/cp1140.pyc
  • encodings/cp1250.pyc
  • encodings/cp1251.pyc
  • encodings/cp1252.pyc
  • encodings/cp1253.pyc
  • encodings/cp1254.pyc
  • encodings/cp1255.pyc
  • encodings/cp1256.pyc
  • encodings/cp1257.pyc
  • encodings/cp1258.pyc
  • encodings/cp273.pyc
  • encodings/cp424.pyc
  • encodings/cp437.pyc
  • encodings/cp500.pyc
  • encodings/cp65001.pyc
  • encodings/cp720.pyc
  • encodings/cp737.pyc
  • encodings/cp775.pyc
  • encodings/cp850.pyc
  • encodings/cp852.pyc
  • encodings/cp855.pyc
  • encodings/cp856.pyc
  • encodings/cp857.pyc
  • encodings/cp858.pyc
  • encodings/cp860.pyc
  • encodings/cp861.pyc
  • encodings/cp862.pyc
  • encodings/cp863.pyc
  • encodings/cp864.pyc
  • encodings/cp865.pyc
  • encodings/cp866.pyc
  • encodings/cp869.pyc
  • encodings/cp874.pyc
  • encodings/cp875.pyc
  • encodings/cp932.pyc
  • encodings/cp949.pyc
  • encodings/cp950.pyc
  • encodings/euc_jis_2004.pyc
  • encodings/euc_jisx0213.pyc
  • encodings/euc_jp.pyc
  • encodings/euc_kr.pyc
  • encodings/gb18030.pyc
  • encodings/gb2312.pyc
  • encodings/gbk.pyc
  • encodings/hex_codec.pyc
  • encodings/hp_roman8.pyc
  • encodings/hz.pyc
  • encodings/idna.pyc
  • encodings/iso2022_jp.pyc
  • encodings/iso2022_jp_1.pyc
  • encodings/iso2022_jp_2.pyc
  • encodings/iso2022_jp_2004.pyc
  • encodings/iso2022_jp_3.pyc
  • encodings/iso2022_jp_ext.pyc
  • encodings/iso2022_kr.pyc
  • encodings/iso8859_1.pyc
  • encodings/iso8859_10.pyc
  • encodings/iso8859_11.pyc
  • encodings/iso8859_13.pyc
  • encodings/iso8859_14.pyc
  • encodings/iso8859_15.pyc
  • encodings/iso8859_16.pyc
  • encodings/iso8859_2.pyc
  • encodings/iso8859_3.pyc
  • encodings/iso8859_4.pyc
  • encodings/iso8859_5.pyc
  • encodings/iso8859_6.pyc
  • encodings/iso8859_7.pyc
  • encodings/iso8859_8.pyc
  • encodings/iso8859_9.pyc
  • encodings/johab.pyc
  • encodings/koi8_r.pyc
  • encodings/koi8_u.pyc
  • encodings/latin_1.pyc
  • encodings/mac_arabic.pyc
  • encodings/mac_centeuro.pyc
  • encodings/mac_croatian.pyc
  • encodings/mac_cyrillic.pyc
  • encodings/mac_farsi.pyc
  • encodings/mac_greek.pyc
  • encodings/mac_iceland.pyc
  • encodings/mac_latin2.pyc
  • encodings/mac_roman.pyc
  • encodings/mac_romanian.pyc
  • encodings/mac_turkish.pyc
  • encodings/mbcs.pyc
  • encodings/palmos.pyc
  • encodings/ptcp154.pyc
  • encodings/punycode.pyc
  • encodings/quopri_codec.pyc
  • encodings/raw_unicode_escape.pyc
  • encodings/rot_13.pyc
  • encodings/shift_jis.pyc
  • encodings/shift_jis_2004.pyc
  • encodings/shift_jisx0213.pyc
  • encodings/tis_620.pyc
  • encodings/undefined.pyc
  • encodings/unicode_escape.pyc
  • encodings/unicode_internal.pyc
  • encodings/utf_16.pyc
  • encodings/utf_16_be.pyc
  • encodings/utf_16_le.pyc
  • encodings/utf_32.pyc
  • encodings/utf_32_be.pyc
  • encodings/utf_32_le.pyc
  • encodings/utf_7.pyc
  • encodings/utf_8.pyc
  • encodings/utf_8_sig.pyc
  • encodings/uu_codec.pyc
  • encodings/zlib_codec.pyc
  • functools.pyc
  • heapq.pyc
  • io.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • operator.pyc
  • re.pyc
  • reprlib.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • traceback.pyc
  • types.pyc
  • weakref.pyc
  • gen_keys/gen_keys.exe
    .exe windows:4 windows x86 arch:x86

    a6360a33ab43f0e49d6d629cf4228f08


    Headers

    Imports

    Sections

  • __init__.pyc
  • gen_keys/winutil.pyd
    .dll windows:5 windows x86 arch:x86

    7ee2b3d39e5ca502a38e09634c795792


    Headers

    Imports

    Exports

    Sections

  • pyexpat.pyd
    .dll windows:5 windows x86 arch:x86

    69449940477a488a415b309bd52a8046


    Headers

    Imports

    Exports

    Sections

  • python34.dll
    .dll windows:5 windows x86 arch:x86

    bf31f75de465e5022a052fd959325045


    Headers

    Imports

    Exports

    Sections

  • pywintypes34.dll
    .dll windows:5 windows x86 arch:x86

    3de2e580bd93aed5eb6506d819d3df3d


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/accessible/qtaccessiblewidgets4.dll
    .dll windows:5 windows x86 arch:x86

    5dc2c585ffa9751ea26f806d24557fcf


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/bearer/qgenericbearer4.dll
    .dll windows:5 windows x86 arch:x86

    22b0be699d4ed2427e19e05807e0ef07


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/bearer/qnativewifibearer4.dll
    .dll windows:5 windows x86 arch:x86

    0ddeb530ae88708f33c282a2844c5f8b


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/codecs/qcncodecs4.dll
    .dll windows:5 windows x86 arch:x86

    dcf5ed1496ecf5c98ccfe2e07b56f610


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/codecs/qjpcodecs4.dll
    .dll windows:5 windows x86 arch:x86

    30f1ed7737bff2301753cb287448a5e8


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/codecs/qkrcodecs4.dll
    .dll .ps1 windows:5 windows x86 arch:x86 polyglot

    0b7c004e28c5207481371b32b5b36999


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/codecs/qtwcodecs4.dll
    .dll windows:5 windows x86 arch:x86

    ce6a67fa3ba293b459092f0443b305fc


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/graphicssystems/qglgraphicssystem4.dll
    .dll windows:5 windows x86 arch:x86

    7b16b801b50710c17431c23d410661ad


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/iconengines/qsvgicon4.dll
    .dll windows:5 windows x86 arch:x86

    0832364210ad4bf95b45bddfb479b29d


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/imageformats/qgif4.dll
    .dll windows:5 windows x86 arch:x86

    3fba836b5b92f0f0b35b7d606410a4e8


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    234648628dd4c8af896510b5a1ee61eb


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/imageformats/qjpeg4.dll
    .dll windows:5 windows x86 arch:x86

    2b8f0f1c43b6c00454c57c763517d0fe


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/imageformats/qmng4.dll
    .dll windows:5 windows x86 arch:x86

    140f126d14cc1800d0af3dba1a30b4ee


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/imageformats/qsvg4.dll
    .dll windows:5 windows x86 arch:x86

    663f73b47dc1adaa8407a1351694cf56


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/imageformats/qtga4.dll
    .dll windows:5 windows x86 arch:x86

    749befb2b1177c349e91aad427c3bce0


    Headers

    Imports

    Exports

    Sections

  • qt4_plugins/imageformats/qtiff4.dll
    .dll windows:5 windows x86 arch:x86

    9d039a2c5ff4ed4feeb1c4335279cce3


    Headers

    Imports

    Exports

    Sections

  • requests/cacert.pem
  • select.pyd
    .dll windows:5 windows x86 arch:x86

    1a29e10efc54a9291da0e908d2c68818


    Headers

    Imports

    Exports

    Sections

  • sip.pyd
    .dll windows:5 windows x86 arch:x86

    ed804565b9d4ed842a157a83a0db2db6


    Headers

    Imports

    Exports

    Sections

  • unicodedata.pyd
    .dll windows:5 windows x86 arch:x86

    a01f425d4ee41eb620b69d752384032a


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • win32wnet.pyd
    .dll windows:5 windows x86 arch:x86

    7c2acacc4a1a5c639e3cba3d465eaa4b


    Headers

    Imports

    Exports

    Sections