General

  • Target

    7b26b4d8fc72597880b4b9c982d3f201_JaffaCakes118

  • Size

    731KB

  • MD5

    7b26b4d8fc72597880b4b9c982d3f201

  • SHA1

    3d637e2dad4cee846bbb0a61e72dd6083ac67771

  • SHA256

    2018c7b47a2a6bfd3046658696c989012e364bcba8ff22a5a29ef8f62fb0b7aa

  • SHA512

    20673e8be770e08b0a49a6778ec89451db18376c9b05f13786344beceec26b6fc012dea219f3bf8ac5c71ec3e0c9bb104a76c14f98e0b7a310b19ade4198ec3f

  • SSDEEP

    12288:7E2W9rEIjsSJkwW9o/MsvDJIanHjzErVNzc7qoakgroXbdqsrTNKH4IeUDmFO5Kw:7xWWcsSJkhW/MsLpnHmzc7qigroL79I5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b26b4d8fc72597880b4b9c982d3f201_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DM_loader.gif
    .gif
  • $PLUGINSDIR/FDMClient.dll
    .dll windows:5 windows x86 arch:x86

    26354f18363e84db3ad0df15b94f135a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Failed.htm
    .js
  • $PLUGINSDIR/FirefoxHandler.dll
    .dll windows:5 windows x86 arch:x86

    0b0bd9a74b81c20dd1ca10dffb1e2ff5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NoneSilentSuccess.htm
    .js
  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    6e63471b3d7c59cf9b8572bf93e2cf35


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Success.htm
    .js
  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WelcomeScreen.htm
    .js
  • $PLUGINSDIR/certInlineLB.pfx
  • $PLUGINSDIR/icon.png
    .png
  • $PLUGINSDIR/manager/init.html
    .html
  • $PLUGINSDIR/manager/manager.html
  • $PLUGINSDIR/manager/scripts/WebBrowser_embedded.exe
    .exe windows:5 windows x86 arch:x86

    58d8aadd9090057384b15d80c89248b1


    Headers

    Imports

    Sections

  • $PLUGINSDIR/manager/scripts/gplay.js
    .js
  • $PLUGINSDIR/manager/scripts/jquery-1.10.1.min.js
    .js
  • $PLUGINSDIR/manager/scripts/manager.js
    .js
  • $PLUGINSDIR/manager/scripts/sharedWorker.js
    .js
  • $PLUGINSDIR/proxy.html
    .html .js polyglot
  • $PLUGINSDIR/webapphost.dll
    .dll windows:5 windows x86 arch:x86

    32200e9dc1db0d085af7652b73e5316c


    Code Sign

    Headers

    Imports

    Exports

    Sections