General

  • Target

    78156392b6f3e09cd940e4189e261b1d_JaffaCakes118

  • Size

    10.5MB

  • MD5

    78156392b6f3e09cd940e4189e261b1d

  • SHA1

    dff7cbfb6b33ff95e0704d19a0f6f6ba2ca21e76

  • SHA256

    6c7e2cd07015e083dc735302b498e4dec8865a17f86d5aebdead9344e29193ec

  • SHA512

    7532855e2c6119fffef0c675d809c29923c7ed9472737af322bdfee9345f201730cb7fd2f8ad2cd1108aa2faeb3737d8a06a36edfb9e54121a24365cf960d384

  • SSDEEP

    196608:sZy7kDUmiUs/jpjOfu2Lp4A4VO2VR7/PSLr78xs2SS4hyfrgDtSlGMfxLvhoQJ1v:sZlRsrp8LplWFb0r7jhEgmxLvmQJF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 78156392b6f3e09cd940e4189e261b1d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/GenThumb.dll
    .dll windows:4 windows x86 arch:x86

    30ab357a6eff0f9a4708811fed2b3e5b


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/IMG2TIFF.exe
    .exe windows:4 windows x86 arch:x86

    c2575a9382222635bdd89024246a03dc


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/PDF2ExtractImg.exe
    .exe windows:4 windows x86 arch:x86

    e5b2bb62637d30ac18585a5571df0832


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/PDF2STIFF.exe
    .exe windows:4 windows x86 arch:x86

    d841399e488fda7b2ef57e6df55f934f


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/PDF2TIFF.exe
    .exe windows:4 windows x86 arch:x86

    e6959c964767b97f8ca563a50c42c49b


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/PDFArr2ExtractImg.exe
    .exe windows:4 windows x86 arch:x86

    884c4ac900bacd6cb7b8edcb7bb835a9


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/PDFArr2TIFF.exe
    .exe windows:4 windows x86 arch:x86

    35cf9b79aebdfeac2af0ba1dcc4f114a


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/PDFExport20.dll
    .dll windows:4 windows x86 arch:x86

    15ca658ce2d42c69115c066ba503df67


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/XConverToPDFs.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    0afbfbf69c246011200bbab054f4966a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/ezPDFDocDll.dll
    .dll windows:4 windows x86 arch:x86

    6db1864c6742c1682f01820dd4e77b05


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/ezPDFImage.exe
    .exe windows:4 windows x86 arch:x86

    da9a992c6aea3a612b5a7ae1530ed453


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/ezPDFRdr.dll
    .dll windows:4 windows x86 arch:x86

    b7c85b6e41a68144b65cec55a74ea7c0


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/ezPDFRes.dll
    .dll windows:4 windows x86 arch:x86

    9704c6413403804e79b3afc92396146e


    Headers

    Imports

    Sections

  • $PROGRAMFILES/Unidocs/ezPDFWorkBoardXS/ezPDFSplitAllX.exe
    .exe windows:4 windows x86 arch:x86

    df86f25345c9d5406282eb97a2b403f6


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/Delete_Reg.bat
  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/GenThumb.dll
    .dll windows:4 windows x86 arch:x86

    30ab357a6eff0f9a4708811fed2b3e5b


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/IMG2TIFF.exe
    .exe windows:4 windows x86 arch:x86

    c2575a9382222635bdd89024246a03dc


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/PDF2ExtractImg.exe
    .exe windows:4 windows x86 arch:x86

    e5b2bb62637d30ac18585a5571df0832


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/PDF2STIFF.exe
    .exe windows:4 windows x86 arch:x86

    d841399e488fda7b2ef57e6df55f934f


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/PDF2TIFF.exe
    .exe windows:4 windows x86 arch:x86

    e6959c964767b97f8ca563a50c42c49b


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/PDFArr2ExtractImg.exe
    .exe windows:4 windows x86 arch:x86

    884c4ac900bacd6cb7b8edcb7bb835a9


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/PDFArr2TIFF.exe
    .exe windows:4 windows x86 arch:x86

    35cf9b79aebdfeac2af0ba1dcc4f114a


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/PDFExport20.dll
    .dll windows:4 windows x86 arch:x86

    15ca658ce2d42c69115c066ba503df67


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/PRNSet.exe
    .exe windows:4 windows x86 arch:x86

    f18a4680998af3f5232f11d2aa899008


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/XConverToPDFs.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    0afbfbf69c246011200bbab054f4966a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/ezPDFDocDll.dll
    .dll windows:4 windows x86 arch:x86

    6db1864c6742c1682f01820dd4e77b05


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/ezPDFImage.exe
    .exe windows:4 windows x86 arch:x86

    da9a992c6aea3a612b5a7ae1530ed453


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/ezPDFRdr.dll
    .dll windows:4 windows x86 arch:x86

    b7c85b6e41a68144b65cec55a74ea7c0


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/ezPDFRes.dll
    .dll windows:4 windows x86 arch:x86

    9704c6413403804e79b3afc92396146e


    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Unidocs/ezPDFWorkBoardXS/ezPDFSplitAllX.exe
    .exe windows:4 windows x86 arch:x86

    df86f25345c9d5406282eb97a2b403f6


    Headers

    Imports

    Sections