General

  • Target

    8680e63b0fb2e913cdb1acd88f8ef504_JaffaCakes118

  • Size

    3.6MB

  • MD5

    8680e63b0fb2e913cdb1acd88f8ef504

  • SHA1

    652488322a4e4be401b23a00d5671418c54dff37

  • SHA256

    05161714cc92bb50800f59c17673dc46b246b559d18d518a3e6838992a10b98b

  • SHA512

    f334bc3727cd21a45b60401d9c50a3c5286de0833583c24218e2e5fbdec556dfb3de5cc95fa532e2f866b448c2fa6168e27e46f81a82e18d1361e44bdc7fe796

  • SSDEEP

    98304:HHKQmGOaqFx//im2RjZ1ZMqBR77YVYq34dnjP3:nVmGYiDBf7sVYq34dnb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 8680e63b0fb2e913cdb1acd88f8ef504_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • Aspell/aspell-languages.csv
  • Aspell/data/cp1250.cmap
  • Aspell/data/cp1250.cset
  • Aspell/data/cp1251.cmap
  • Aspell/data/cp1251.cset
  • Aspell/data/cp1252.cmap
  • Aspell/data/cp1252.cset
  • Aspell/data/cp1253.cmap
  • Aspell/data/cp1253.cset
  • Aspell/data/cp1254.cmap
  • Aspell/data/cp1254.cset
  • Aspell/data/cp1255.cmap
  • Aspell/data/cp1255.cset
  • Aspell/data/cp1256.cmap
  • Aspell/data/cp1256.cset
  • Aspell/data/cp1257.cmap
  • Aspell/data/cp1257.cset
  • Aspell/data/cp1258.cmap
  • Aspell/data/cp1258.cset
  • Aspell/data/dvorak.kbd
  • Aspell/data/iso-8859-1.cmap
  • Aspell/data/iso-8859-1.cset
  • Aspell/data/iso-8859-10.cmap
  • Aspell/data/iso-8859-10.cset
  • Aspell/data/iso-8859-11.cmap
  • Aspell/data/iso-8859-11.cset
  • Aspell/data/iso-8859-13.cmap
  • Aspell/data/iso-8859-13.cset
  • Aspell/data/iso-8859-14.cmap
  • Aspell/data/iso-8859-14.cset
  • Aspell/data/iso-8859-15.cmap
  • Aspell/data/iso-8859-15.cset
  • Aspell/data/iso-8859-16.cmap
  • Aspell/data/iso-8859-16.cset
  • Aspell/data/iso-8859-2.cmap
  • Aspell/data/iso-8859-2.cset
  • Aspell/data/iso-8859-3.cmap
  • Aspell/data/iso-8859-3.cset
  • Aspell/data/iso-8859-4.cmap
  • Aspell/data/iso-8859-4.cset
  • Aspell/data/iso-8859-5.cmap
  • Aspell/data/iso-8859-5.cset
  • Aspell/data/iso-8859-6.cmap
  • Aspell/data/iso-8859-6.cset
  • Aspell/data/iso-8859-7.cmap
  • Aspell/data/iso-8859-7.cset
  • Aspell/data/iso-8859-8.cmap
  • Aspell/data/iso-8859-8.cset
  • Aspell/data/iso-8859-9.cmap
  • Aspell/data/iso-8859-9.cset
  • Aspell/data/koi8-r.cmap
  • Aspell/data/koi8-r.cset
  • Aspell/data/koi8-u.cmap
  • Aspell/data/koi8-u.cset
  • Aspell/data/split.kbd
  • Aspell/data/standard.kbd
  • Help/calendar.html
    .html
  • Help/contacts.html
    .html
  • Help/email.html
    .html
  • Help/features.html
    .html
  • Help/filters.html
    .html
  • Help/help.css
  • Help/import.html
    .html
  • Help/index.html
    .html
  • Help/install.html
    .html
  • Help/intro.html
    .html
  • Help/menu.html
    .html
  • Help/plugins.html
    .html
  • Help/print.html
    .html
  • Help/scripting.html
    .html
  • Help/scripting/index.html
    .html
  • Help/scripting/library.html
    .html
  • Help/scripting/scripting.css
  • Help/scripting/syntax.html
    .html
  • Help/ui.html
    .html
  • Lgi12x64nop.dll
    .dll windows:6 windows x64 arch:x64

    51e770099c6f7476735f9f6841f2661a


    Headers

    Imports

    Exports

    Sections

  • Resources/About.html
    .html
  • Resources/About64px.png
    .png
  • Resources/EmojiMap.png
    .png
  • Resources/Flags.gif
    .gif
  • Resources/Icons.gif
    .gif
  • Resources/NoFace160.png
    .png
  • Resources/NoFace80.png
    .png
  • Resources/PreviewContact.html
    .html
  • Resources/PreviewGroup.html
    .html
  • Resources/PreviewMail.html
    .html
  • Resources/Scribe.lr8
    .xml
  • Resources/Title.gif
    .gif
  • Resources/Title.html
    .html
  • Resources/xgate-icons-32.png
    .png
  • Scribe.exe
    .exe windows:6 windows x64 arch:x64

    2d83a9bc7612ab794427ad41df4f1b6d


    Headers

    Imports

    Exports

    Sections

  • ScribeMapi.dll
    .dll windows:6 windows x64 arch:x64

    3e5e77b553b035de655c53ff58657d3c


    Headers

    Imports

    Exports

    Sections

  • Scripts/Add Senders To Contacts.script
  • Scripts/Api.html
    .html
  • Scripts/Delete Attachments.script
  • Scripts/Delete Duplicate Messages.script
  • Scripts/Dom.txt
  • Scripts/Mail Filters Menu.script
  • Scripts/resdefs.h
  • Updater.exe
    .exe windows:6 windows x64 arch:x64

    4cba3c6faa138087d468238d0ebc5cf9


    Headers

    Imports

    Sections

  • aspell-dist-0.60.dll
    .dll windows:6 windows x64 arch:x64

    4bc3bff233f8898a9413d5950b6d0263


    Headers

    Imports

    Exports

    Sections

  • libjpeg12x64.dll
    .dll windows:6 windows x64 arch:x64

    00cc25746c9873f4edc18ddbe32df239


    Headers

    Imports

    Exports

    Sections

  • libntlm12x64nop.dll
    .dll windows:6 windows x64 arch:x64

    cb911ec115b2ba9ecf4d60fdc9664ce8


    Headers

    Imports

    Exports

    Sections

  • libpng12x64.dll
    .dll windows:6 windows x64 arch:x64

    ca122154d595d0642e52346bcd74ec35


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections