General

  • Target
    7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118
  • Size 9.9MB
  • Sample240528-g7a2eahc5y
  • SHA256 331c4b65cc3859aabcf21d012e8e7e89ae68a591de66e1b61064b3263694ebe1
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

File Explorer

  • 7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118
    .exe 9.9MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/NSIS.InstallOptions.ini
    643B
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    150KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • README.TXT
    3KB
  • Uninstall.exe
    .exe 333KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/modern-header.bmp
    150KB
  • bin/api-ms-win-core-console-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-datetime-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-debug-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-file-l1-1-0.dll
    .dll 21KB
  • bin/api-ms-win-core-file-l1-2-0.dll
    .dll 18KB
  • bin/api-ms-win-core-file-l2-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-handle-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-heap-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-interlocked-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll 19KB
  • bin/api-ms-win-core-localization-l1-2-0.dll
    .dll 20KB
  • bin/api-ms-win-core-memory-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll 19KB
  • bin/api-ms-win-core-processthreads-l1-1-0.dll
    .dll 20KB
  • bin/api-ms-win-core-processthreads-l1-1-1.dll
    .dll 18KB
  • bin/api-ms-win-core-profile-l1-1-0.dll
    .dll 17KB
  • bin/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-string-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-synch-l1-1-0.dll
    .dll 20KB
  • bin/api-ms-win-core-synch-l1-2-0.dll
    .dll 18KB
  • bin/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll 19KB
  • bin/api-ms-win-core-timezone-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-core-util-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-crt-conio-l1-1-0.dll
    .dll 19KB
  • bin/api-ms-win-crt-convert-l1-1-0.dll
    .dll 22KB
  • bin/api-ms-win-crt-environment-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 20KB
  • bin/api-ms-win-crt-heap-l1-1-0.dll
    .dll 19KB
  • bin/api-ms-win-crt-locale-l1-1-0.dll
    .dll 18KB
  • bin/api-ms-win-crt-math-l1-1-0.dll
    .dll 27KB
  • bin/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll 26KB
  • bin/api-ms-win-crt-private-l1-1-0.dll
    .dll 69KB
  • bin/api-ms-win-crt-process-l1-1-0.dll
    .dll 19KB
  • bin/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 22KB
  • bin/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 24KB
  • bin/api-ms-win-crt-string-l1-1-0.dll
    .dll 24KB
  • bin/api-ms-win-crt-time-l1-1-0.dll
    .dll 20KB
  • bin/api-ms-win-crt-utility-l1-1-0.dll
    .dll 18KB
  • bin/bg_BG/mmex.mo
    107KB
  • bin/concrt140.dll
    .dll 324KB
  • bin/cs_CZ/mmex.mo
    66KB
  • bin/de_DE/mmex.mo
    113KB
  • bin/el_GR/mmex.mo
    77KB
  • bin/en_GB/mmex.mo
    823B
  • bin/en_US/mmex.mo
    .eml 683B
  • bin/es_ES/mmex.mo
    131KB
  • bin/fr_FR/mmex.mo
    124KB
  • bin/he_IL/mmex.mo
    123KB
  • bin/hr_HR/mmex.mo
    127KB
  • bin/hu_HU/mmex.mo
    102KB
  • bin/it_IT/mmex.mo
    127KB
  • bin/ja_JP/mmex.mo
    73KB
  • bin/lt_LT/mmex.mo
    75KB
  • bin/mmex.exe
    .exe 7.3MB
  • bin/msvcp140.dll
    .dll 613KB
  • bin/nl_NL/mmex.mo
    98KB
  • bin/pl_PL/mmex.mo
    108KB
  • bin/pt_BR/mmex.mo
    114KB
  • bin/ru_RU/mmex.mo
    159KB
  • bin/sk_SK/mmex.mo
    67KB
  • bin/sq_AL/mmex.mo
    76KB
  • bin/sv_SE/mmex.mo
    54KB
  • bin/tr_TR/mmex.mo
    111KB
  • bin/ucrtbase.dll
    .dll 992KB
  • bin/vcruntime140.dll
    .dll 83KB
  • bin/wxbase313u_net_vc_mmex.dll
    .dll 184KB
  • bin/wxbase313u_vc_mmex.dll
    .dll 2.5MB
  • bin/wxbase313u_xml_vc_mmex.dll
    .dll 170KB
  • bin/wxmsw313u_adv_vc_mmex.dll
    .dll 10KB
  • bin/wxmsw313u_aui_vc_mmex.dll
    .dll 613KB
  • bin/wxmsw313u_core_vc_mmex.dll
    .dll 7.7MB
  • bin/wxmsw313u_html_vc_mmex.dll
    .dll 746KB
  • bin/wxmsw313u_qa_vc_mmex.dll
    .dll 164KB
  • bin/wxmsw313u_stc_vc_mmex.dll
    .dll 1.5MB
  • bin/wxmsw313u_webview_vc_mmex.dll
    .dll 141KB
  • bin/zh_CN/mmex.mo
    81KB
  • contrib.txt
    10KB
  • help/Analytics.md
    1KB
  • help/CNAME
    27B
  • help/_config.yml
    27B
  • help/budget.html
    .html .js 375B
  • help/css/flag-icon.css
    916B
  • help/css/manual.css
    4KB
  • help/de/index.html
    119KB
  • help/en/assetsGRM_.gif
    61KB
  • help/en/btn_donateCC_LG.gif
    .gif 3KB
  • help/en/budget.html
    .js 3KB
  • help/en/budget_editor.png
    .png 15KB
  • help/en/budget_entry_details.png
    .png 17KB
  • help/en/budget_grid.png
    .png 36KB
  • help/en/grm.gif
    .gif 241KB
  • help/en/grm.html
    .js 4KB
  • help/en/grm_custom_date.png
    .png 11KB
  • help/en/grm_toolbar.png
    .png 8KB
  • help/en/index.html
    66KB
  • help/en/mmex_concept.png
    .png 68KB
  • help/en/mmex_db_structure.png
    .png 182KB
  • help/en/stock_shares_new_shares.png
    .png 62KB
  • help/en/stock_shares_new_stock.png
    .png 75KB
  • help/en/stock_shares_portfolio.png
    .png 113KB
  • help/en/stock_shares_share_account.png
    .png 116KB
  • help/en/stock_shares_view_transactions.png
    .png 26KB
  • help/en/stocks_and_shares.html
    .js 9KB
  • help/es/budget.html
    .js 3KB
  • help/es/grm.html
    .html .js 4KB
  • help/es/index.html
    75KB
  • help/es/stocks_and_shares.html
    .js 13KB
  • help/fr/index.html
    .html 43KB
  • help/fr/mmex_concept.png
    .png 16KB
  • help/grm.html
    .html .js 372B
  • help/hu/index.html
    80KB
  • help/hu/mmex_concept.png
    .png 62KB
  • help/img/backtotop.png
    .png 3KB
  • help/img/flags/de.svg
    213B
  • help/img/flags/en.svg
    538B
  • help/img/flags/es.svg
    88KB
  • help/img/flags/fr.svg
    292B
  • help/img/flags/hu.svg
    274B
  • help/img/flags/it.svg
    292B
  • help/img/flags/pl.svg
    222B
  • help/img/flags/ru.svg
    286B
  • help/index.html
    .html .js 619B
  • help/it/budget.html
    .html .js 3KB
  • help/it/grm.html
    .html 4KB
  • help/it/index.html
    114KB
  • help/js/back_to_top.js
    .js 507B
  • help/js/jquery.min.js
    .js 81KB
  • help/js/lang_menu.js
    .js 1KB
  • help/js/toc.js
    .js 1KB
  • help/master.css
    14KB
  • help/pl/btn_donateCC_LG.gif
    .gif 2KB
  • help/pl/budget_editor.png
    .png 19KB
  • help/pl/budget_entry_details.png
    .png 13KB
  • help/pl/budget_grid.png
    .png 18KB
  • help/pl/index.html
    .html 62KB
  • help/pl/mmex_concept.png
    .png 70KB
  • help/ru/budget.html
    .html .js 4KB
  • help/ru/grm.html
    .html .js 5KB
  • help/ru/grm_custom_date.png
    .png 8KB
  • help/ru/index.html
    85KB
  • help/ru/mmex_concept.png
    .png 68KB
  • help/stocks_and_shares.html
    .html .js 380B
  • license.txt
    3KB
  • res/ChartNew.js
    .js 456KB
  • res/format.js
    .js 4KB
  • res/home_page.htt
    .js 10KB
  • res/kaching.wav
    8KB
  • res/master.css
    14KB
  • res/mmex.ico
    150KB
  • res/mmex.png
    .png 4KB
  • res/sorttable.js
    .js 16KB

7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118

  • IMPHASH 3abe302b6d9a1256e6a915429af4ffd2
  • SHA256 331c4b65cc3859aabcf21d012e8e7e89ae68a591de66e1b61064b3263694ebe1
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths