General

  • Target

    8aa30b67bf76a1d921bc819ff7ab33a9_JaffaCakes118

  • Size

    9.5MB

  • MD5

    8aa30b67bf76a1d921bc819ff7ab33a9

  • SHA1

    8a5e4ce46fb3e8f80078206b4d7d060f2671d015

  • SHA256

    532df3e9c72085796854ebd190953c8c41c1f51fb448948d5a303a4b20e9dbac

  • SHA512

    b08f7b2752c9f8ae218c7f5d4de5d90fa0d5ac220f62ae67a8b21499aac1564cce54af5d87232fdb1222af47bb5e05f45122ad8f1782639429b3dc0b2b18519c

  • SSDEEP

    196608:oPmz6vb3FahtL6HaSt9hU56v5scsG00gD7K15NRk1jWiwNX3VnfyXH:oMi4bSRU5wsegD7K15NRk15wNXFnaXH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 8aa30b67bf76a1d921bc819ff7ab33a9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount2.dll
    .dll windows:4 windows x86 arch:x86

    795a1f93bc887fb067b2285d742f7fa0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FILEDownPlug2.dll
    .dll windows:4 windows x86 arch:x86

    1b6303fba3c09e3c12e1f0a7f2cc93ca


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IsVista.dll
    .dll windows:4 windows x86 arch:x86

    efa700f367af492674a29b601d27bd91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserMgr.dll
    .dll windows:4 windows x86 arch:x86

    bac2b3d4a0df9a23aee940b8ecd0d168


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/gettext.dll
    .dll windows:4 windows x86 arch:x86

    afc7f45ec0ac7d42202c555f96ed7d93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisdt.dll
    .dll windows:1 windows x86 arch:x86

    aa911a57ef69e33e93666ad699a8d7be


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    1c345849e4fc53e2f9d9d9b35c7ec0dd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/seetozip.ini
  • $PLUGINSDIR/stack.dll
    .dll windows:4 windows x86 arch:x86

    55ae76a2cfe164921f566c03cfbba5ec


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/test.xml
    .xml
  • StarPDF.exe
    .exe windows:4 windows x86 arch:x86

    a0e6dbd00e660bcb9f5ef15464211947


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fpdfcjk.bin
  • lang_ko_kr.xml
  • lex/accent.tlx
  • lex/correct.tlx
  • lex/ssceam.tlx
    .vbs
  • lex/ssceam2.clx
  • lex/sscebr.tlx
    .vbs
  • lex/sscebr2.clx
  • lex/ssceca.tlx
    .vbs
  • lex/ssceca2.clx
  • lex/tech.tlx
  • lex/userdic.tlx
  • plugins/StarPDFReaderX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cd92b3730e30658cb3c25da03927b4b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/StarPDFReaderX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1e6576febdad8347a76372ff42665437


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/Uninstall.exe.nsis
  • plugins/npStarPDFReaderPlug.dll
    .dll windows:4 windows x86 arch:x86

    30246f81ed82f9963eb5115c62ea0147


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/setup_see.bmp
  • plugins/setup_zip.bmp
  • starpdfup.exe
    .exe windows:4 windows x86 arch:x86

    d70c75484a7c47d47ad060b6a24377e3


    Headers

    Imports

    Sections

  • startools_addpdf.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount_new.dll
    .dll windows:4 windows x86 arch:x86

    eef21a13a3a20993251273037c6620dd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • STARUpdate.exe
    .exe windows:4 windows x86 arch:x86

    13a2fe22aaafd3dd19b2f2bce5b78c7d


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount_new.dll
    .dll windows:4 windows x86 arch:x86

    eef21a13a3a20993251273037c6620dd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp