General

  • Target

    8507ce0a8e439a98906fa1ebbff6017b_JaffaCakes118

  • Size

    11.8MB

  • MD5

    8507ce0a8e439a98906fa1ebbff6017b

  • SHA1

    10cc10f8e58aa88a00bd080a47f3c5676f67e1f7

  • SHA256

    209e259d2efa76f8317ed82762ab569e2cdaaad0377db88415b6c42147a75f3a

  • SHA512

    62354a42beee76d4f04bf5ce752df5eed831617856b5cf4b466d4eccd2f7272a2823eb13cd017e83ed45bd2c8fc1ec0a209c81fda362c8800a85d8eef902aa6b

  • SSDEEP

    196608:wR6H8cp6dXM88gq17s0vDRo4TUW94qc63j9yTH/V4c1ALoa1/5eDOxDasFdB:wROoMHH5HLRo4TUhqyJNC4DQP

Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • 8507ce0a8e439a98906fa1ebbff6017b_JaffaCakes118
    .zip
  • 0x0409.ini
  • Autorun.inf
  • Common/InstallShield/UpdateService/ISDM.exe
    .exe windows:4 windows x86 arch:x86

    b5558fce337c1e97773643800b7ef9dc


    Headers

    Imports

    Sections

  • Common/InstallShield/UpdateService/ISUSPM.exe
    .exe windows:4 windows x86 arch:x86

    67af66ba0443aed8fc5e024dc8ee29b6


    Headers

    Imports

    Sections

  • Common/InstallShield/UpdateService/ISUSPM.exe.manifest
    .xml
  • Common/InstallShield/UpdateService/_ispmres.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Common/InstallShield/UpdateService/_isusres.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Common/InstallShield/UpdateService/agent.exe
    .exe windows:4 windows x86 arch:x86

    41c854ae4a642c567f1b793f7fac60cb


    Headers

    Imports

    Sections

  • Common/InstallShield/UpdateService/images/File16.gif
    .gif
  • Common/InstallShield/UpdateService/images/HelpDoc16.gif
    .gif
  • Common/InstallShield/UpdateService/images/background.jpg
    .jpg
  • Common/InstallShield/UpdateService/images/left_task.gif
    .gif
  • Common/InstallShield/UpdateService/images/left_task2.gif
    .gif
  • Common/InstallShield/UpdateService/issch.exe
    .exe windows:4 windows x86 arch:x86

    06f92f95d6c22bf59f41fc161357f85b


    Headers

    Imports

    Sections

  • Common/InstallShield/UpdateService/pm.css
  • Common/InstallShield/UpdateService/pm.html
    .html
  • HyperNiche 2.msi
    .msi
  • Personal/HyperNiche/Example Data/Climate200.wk1
  • Personal/HyperNiche/Example Data/Default.npj
  • Personal/HyperNiche/Example Data/Larix200.wk1
  • Personal/HyperNiche/Example Data/LarixAndClimate200.xlsx
    .xlsx office2007
  • Personal/HyperNiche/Example Data/Readme.txt
  • Personal/HyperNiche/Example Data/SigmGaus.mjm
  • Personal/HyperNiche/Example Data/SigmGaus.spx
  • Personal/HyperNiche/Example Data/SigmGaus.wk1
  • Personal/HyperNiche/Example Data/SigmGaus.xls
    .xls windows office2003
  • Personal/HyperNiche/Example Data/SigmGaus2.mjm
  • Personal/HyperNiche/Example Data/SigmGaus2.wk1
  • Setup.ini
  • System32/ISUSPM.cpl
    .dll windows:4 windows x86 arch:x86

    7660b46a9b95303e64e1fd87820b1651


    Headers

    Imports

    Exports

    Sections

  • System32/Redist/MS/System/msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • Windows/Downloaded Program Files/dwusplay.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    20c1e5775eb662eff59e2cb64ab94f42


    Headers

    Imports

    Exports

    Sections

  • Windows/Downloaded Program Files/dwusplay.exe
    .exe windows:4 windows x86 arch:x86

    44a3ea2f229e01c32eec53eb29e8e0ed


    Headers

    Imports

    Sections

  • Windows/Downloaded Program Files/isusweb.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    65990736aa502070200088a9d7f82aea


    Headers

    Imports

    Exports

    Sections

  • instmsia.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • instmsiw.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • program files/HyperNiche 2/CreateDesktopShortcut.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • program files/HyperNiche 2/Dforrt.dll
    .dll windows:4 windows x86 arch:x86

    f16160446b09f4eec43d41910e3edf2a


    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/DistrHN.dll
    .dll windows:4 windows x86 arch:x86

    2e129799bfe00d8885124bd205a3fc86


    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/HBooklet.pdf
    .pdf
    • http://centurytel.net

    • http://www.pcord.com

    • http://www.pcord.com/nichefaq.htm

  • program files/HyperNiche 2/HHActiveX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ea87b25b73aba58227954fc8a9578cbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/HyperNiche2.chm
    .chm
  • program files/HyperNiche 2/HyperNiche2.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • program files/HyperNiche 2/MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/Microsoft.VC90.CRT.manifest
    .xml
  • program files/HyperNiche 2/Model.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • program files/HyperNiche 2/NPMRintro.pdf
    .pdf
  • program files/HyperNiche 2/Niche2.dll
    .dll windows:5 windows x86 arch:x86

    2ea701bec5fae2d8af4e05a52e28eb27


    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/ShuffNiche.dll
    .dll windows:5 windows x86 arch:x86

    08e9efce79d12ed2b51ae3f16bf95ba2


    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/SummarySheetForBasics.pdf
    .pdf
  • program files/HyperNiche 2/Therm4.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • program files/HyperNiche 2/TipsNiche2.txt
  • program files/HyperNiche 2/libifcoremd.dll
    .dll windows:4 windows x86 arch:x86

    bbbec8edf7fc4170fd5605980b535292


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/libifportmd.dll
    .dll windows:4 windows x86 arch:x86

    cf7a53394f2c77250f12c3894cf1fdf1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/libmmd.dll
    .dll windows:4 windows x86 arch:x86

    66caac194d09d81bd5f631338f9c997c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • program files/HyperNiche 2/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    de43819f6987002d63a5772e7e87ff4d


    Code Sign

    Headers

    Imports

    Sections