General

  • Target

    70dd358d8d9b1c9fe064a14c58bdf778_JaffaCakes118

  • Size

    2.2MB

  • MD5

    70dd358d8d9b1c9fe064a14c58bdf778

  • SHA1

    bfd116fe1ea532e60c599adffdee7e19d9a1ef78

  • SHA256

    992dde2e62d9db05ed392c4dbebfe4f74b582da58e6b92b95b8492785a6222f9

  • SHA512

    0a8b5210029690858c6ce5c0bf314ccbf6e2bc3b2d667fca79a2ec47b4fa5888f279dd079755d6c7b408bbf9bd03cbcfc322355745bbf6b3cef1e5257bb01416

  • SSDEEP

    49152:Dyxz5NMRYa7SKui8Uyp5Ki6Zgs6q68+rNlFcsZz0rs+yxf0pDemxmWtd0vmAR:Dwzs7zJ0czgJR8+vFzZQg+u8pDoW/0vB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 70dd358d8d9b1c9fe064a14c58bdf778_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    8fbbf807b5bf33729f0092d4b8c483c4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2be79521ab92f834267b9728a9762af6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    72ab97fccc18249c090aefd986c05a61


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    bd0c5e2173fde31d22cb05fc3c2a33dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/summary.ini
  • $SYSDIR/Drivers/eBoost.sys
    .sys windows:6 windows x64 arch:x64

    2dbb384380794792ee9aea5c7d0e5da2


    Code Sign

    Headers

    Imports

    Sections

  • CacheViewer.exe
    .exe windows:5 windows x86 arch:x86

    728571856e57cd26e5774595ae9a689c


    Code Sign

    Headers

    Imports

    Sections

  • EBstrSvc.exe
    .exe windows:5 windows x86 arch:x86

    7b7ffb54a2157545d6051ea55f1cd1ec


    Code Sign

    Headers

    Imports

    Sections

  • EBstrSvc.new.exe
    .exe windows:5 windows x86 arch:x86

    7b7ffb54a2157545d6051ea55f1cd1ec


    Code Sign

    Headers

    Imports

    Sections

  • StatViewer.exe
    .exe windows:5 windows x86 arch:x86

    577aefed6bb6e604a82afab0872a89b0


    Headers

    Imports

    Sections

  • eBoost.sys
    .sys windows:6 windows x64 arch:x64

    2dbb384380794792ee9aea5c7d0e5da2


    Code Sign

    Headers

    Imports

    Sections

  • eBoostrCP.exe
    .exe windows:5 windows x86 arch:x86

    fda5e0cae9da66b7d5e5fb189271fcf7


    Code Sign

    Headers

    Imports

    Sections

  • eBoostrCP.new.exe
    .exe windows:5 windows x86 arch:x86

    fda5e0cae9da66b7d5e5fb189271fcf7


    Code Sign

    Headers

    Imports

    Sections

  • eBoostrMeasure.exe
    .exe windows:5 windows x86 arch:x86

    85534292537a00cdc53d581f7de33eca


    Code Sign

    Headers

    Imports

    Sections

  • memeat.exe
    .exe windows:5 windows x86 arch:x86

    bb85172f6de2f7726e6e71dab302b732


    Code Sign

    Headers

    Imports

    Sections

  • sqlite.dll
    .dll windows:5 windows x86 arch:x86

    3234b36957078ea567e6ca8a72204226


    Headers

    Imports

    Exports

    Sections

  • sqlite.new.dll
    .dll windows:5 windows x86 arch:x86

    3234b36957078ea567e6ca8a72204226


    Headers

    Imports

    Exports

    Sections