General

  • Target

    70691e8216cfaf86141dc2e4bc1827a7_JaffaCakes118

  • Size

    1.0MB

  • MD5

    70691e8216cfaf86141dc2e4bc1827a7

  • SHA1

    805f75247b836809688136a59308938d91998bae

  • SHA256

    f14df288e8d2bfe8240dbcdf34895400beaa04d569bffa8de208a3a54ccdb445

  • SHA512

    913dfea284e52705640c228836bee0b04db9c4b0b1146c84c91dd3d859277fcaf081f111f8ffcdf3886414e49b74616a9b08abc05bc9549782017d83802c007f

  • SSDEEP

    24576:nXWGG2X6/GNvoSaRuwTW77bpS7Uv41PYnfTolJ:XWM6wvzaRurbpS9+4J

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 70691e8216cfaf86141dc2e4bc1827a7_JaffaCakes118
    .rar
  • Destroy Windows 10 Spying/DWS.log
  • Destroy Windows 10 Spying/Destroy Windows 10 Spying.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • unlocker1.9.0-x64.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Antanda.ini
  • $PLUGINSDIR/Delay.dll
    .dll windows:4 windows x86 arch:x86

    bb13ae3bcb238d1bf689a931b2a56cd6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/QuickStores.ini
  • $PLUGINSDIR/QuickStores_graphic_small.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bing_graphic_small.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/FileUnlocker_Installer.exe
    .exe windows:5 windows x86 arch:x86

    3a506d4d335e95cb58bf9bfca91df9aa


    Headers

    Imports

    Sections

  • $TEMP/QuickStores_Unlocker.exe
    .exe windows:1 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/eBay.ico
  • README.TXT
  • Unlocker.exe
    .exe windows:4 windows x64 arch:x64

    c22b69072d35c97328e5010541f8ad8b


    Code Sign

    Headers

    Imports

    Sections

  • UnlockerCOM.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    8a91375a81d9a00ca4864dbcc33546b2


    Headers

    Imports

    Exports

    Sections

  • UnlockerDriver5.sys
    .sys windows:4 windows x64 arch:x64

    2a015bf36d12492d1085356809814d9d


    Code Sign

    Headers

    Imports

    Sections

  • UnlockerInject32.exe
    .exe windows:4 windows x86 arch:x86

    28c87b74b850b535682af01742c40837


    Headers

    Imports

    Sections

  • uninst.exe.nsis