General

  • Target

    8a6bf08836878f583416de0ab9c21538_JaffaCakes118

  • Size

    17.0MB

  • MD5

    8a6bf08836878f583416de0ab9c21538

  • SHA1

    322d283c4b34b95b7307a3dadceee3d5728fc2c6

  • SHA256

    3c09eee346f1259889c8677160984e03f609c93b9831e6be0d3d77a6ef7e2990

  • SHA512

    6617c7d6284840866143081293d529f3a164b3b55a3169b8ec2b3c0d16f5a3e82b2ac546df3c6433cf65b6fadad9d12ae5b52a54c5e4f1d25a7e5e61da3e4e09

  • SSDEEP

    393216:dte4ewLFWS4HKacYMAMfojvHYCRerDRVX9GVUhFs1Gl8J:dtrZ4owjvY0eHRVX9GuhKh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 8a6bf08836878f583416de0ab9c21538_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9bca2c7cb3bba360100a3a7a510fe11d


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/EstUrl.dll
    .dll windows:4 windows x86 arch:x86

    eeb38f232fa753bbd4952f6a14cefac5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    222ba14d7b8ae575c32dd0b8b77a5dea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    34e265a7f45a5a54be208d4166ec2423


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    88d8a4a9c21e345682f6b1fac45c4679


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    f9dfb8ff6a049e4feb3afa5b7a47b099


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsWeb2.dll
    .dll windows:4 windows x86 arch:x86

    082c20552519a39cb8a90624898536df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/workerExtension.dll
    .dll windows:4 windows x86 arch:x86

    65e99b55b9060de4c07bb55e638ce5e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/zumlib.dll
    .dll windows:5 windows x86 arch:x86

    6e21ecf5c7fd20210740626c966c0125


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/ESTsoft/ALUpdate/$R6
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/ESTsoft/Common/ezt.exe
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $R6
    .dll regsvr32 windows:5 windows x86 arch:x86

    97a54c7d1f6644a85582b5e1d3f79a47


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZip.exe
    .exe windows:5 windows x86 arch:x86

    ed5baa9beedc559167cf73c792d26298


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZipCon.exe
    .exe windows:5 windows x86 arch:x86

    48e8d60419ffe9cd64a71cf571ee62b6


    Code Sign

    Headers

    Imports

    Sections