General

  • Target

    81c133a70260e218eda8d4c48af550f8_JaffaCakes118

  • Size

    3.0MB

  • MD5

    81c133a70260e218eda8d4c48af550f8

  • SHA1

    844d5f47e32cc31475c5803f6b604b93ffa545ff

  • SHA256

    ac40e1b1a992ae40b1b9be618f4e317ef41ff8921e391003c0b9c4f6a92929e9

  • SHA512

    d45a4951b120dd9b1ec8ac1ee198b8ca9914e7769d381d631cf2c39071ab751974e9dc080f37fb3f22c8daf2bd627467d6cd33746a96f83917313ca2df8e7255

  • SSDEEP

    49152:e4Zf5Tmms6YC4HlgzUKNoRa3hoIl5yFfHni20onzFV0p4T5lVcL6LDQ92nd:e4h5TgfHqUXahoIl8Lb5vVi8890d

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 81c133a70260e218eda8d4c48af550f8_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/drivers/ABC_FTKBD.sys
    .sys windows:6 windows x64 arch:x64

    a2739294048c77bdfd17338d419afb3c


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/ABC_FTKBD.sys
    .sys windows:6 windows x64 arch:x64

    a2739294048c77bdfd17338d419afb3c


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/npABCSafeInputApp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a3a5b5ea249909b06eee597e97de1cc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AbcSafePluginDriverInstallorUnInstall.dll
    .dll windows:4 windows x86 arch:x86

    a20614655d0342672eeaad8089488779


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerEnter_ABC64.exe
    .exe windows:5 windows x86 arch:x86

    48aa5c8931746a9655524f67b25a47ef


    Code Sign

    Headers

    Imports

    Sections