General

  • Target

    6f76d0c1fb88337cb281b250e2c178fd_JaffaCakes118

  • Size

    568KB

  • MD5

    6f76d0c1fb88337cb281b250e2c178fd

  • SHA1

    c7b1e09633191070ee87a3d5bcd8e2ff3eb48151

  • SHA256

    0ab29a1c5c76e79998b45ddc32e3377d3f59bcd99a0f67f3e831ad02996c96b8

  • SHA512

    c54029e5999b21b631f150469de6ee07c852cf232e51255cc720f14994edcf4e17ded7b1ba6284da9a3afe921cb41700bd718b4983dc6705ae3e9975b59394b1

  • SSDEEP

    12288:1cUCnVQx9b6IRQGCvYC240ImI5b48EKlRg1TdyBurkF0MfkOMvlxiDF:1cUjfbHRQK/4vx16r5aRp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f76d0c1fb88337cb281b250e2c178fd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $APPDATA/USER/doinstall/strFormId/logo/accctrl3.gif
  • $APPDATA/USER/doinstall/strFormId/logo/formdesign.xml
    .xml
  • $APPDATA/USER/doinstall/strFormId/logo/msdnmui.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $APPDATA/USER/doinstall/strFormId/logo/resgen.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $APPDATA/USER/doinstall/strFormId/logo/stlmaps.rgs
  • $APPDATA/USER/doinstall/strFormId/logo/tc-cbq-details.8
  • $APPDATA/USER/doinstall/strFormId/logo/x-google-video-pointer.xml
    .xml
  • $APPDATA/credits/Database-Download.png
    .png
  • $APPDATA/credits/ntfswipe
    .elf linux x64
  • $APPDATA/period/plan/frequency/clean/Jblmp.exe
    .xml
  • $APPDATA/period/plan/frequency/clean/bluetoothd.8
  • $APPDATA/period/plan/frequency/clean/btstuttutorialoverviewmodule1.gif
    .gif
  • $APPDATA/period/plan/frequency/clean/msddslmp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/u2/mailto/connectt/DbgUrtMui.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Acescency
  • $TEMP/diaeresis.dll
    .dll windows:4 windows x86 arch:x86

    b26cd85b3c96781f53099d57f9fd9064


    Headers

    Imports

    Exports

    Sections

  • $TEMP/namespace/CMAccept.exe
  • $TEMP/namespace/org.gnome.yelp.gschema.xml
  • $TEMP/namespace/pnm2ppa-ppa-networking