General

  • Target

    8c97aee27d76f899a5c615ffc0a63a31_JaffaCakes118

  • Size

    29.9MB

  • MD5

    8c97aee27d76f899a5c615ffc0a63a31

  • SHA1

    a43873f1124d833c4942f0a2ede61268053d9a27

  • SHA256

    ee2cd9096999c3ac61a74f40dfc42888876c3522f15a443b77d89c9bc4116422

  • SHA512

    218144fbcfb6677f593033c53ba6d3f396ac5df23d42276dd3056df0d6f09b5b0ca0ec517495b100d4573d7f6d5c1b2d033e4cfe5880a875d33d20c12cd60ff5

  • SSDEEP

    786432:zbS8Bz3x22KrY6QUxoTSlVwVW7obE9B/vu:XzctePV4oo9B3u

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c97aee27d76f899a5c615ffc0a63a31_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bd0641e21b10edfc0a54866bde1ee66c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Setup.exe
    .exe windows:5 windows x86 arch:x86

    bd0641e21b10edfc0a54866bde1ee66c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LinkButton.dll
    .dll windows:5 windows x86 arch:x86

    0b13a0800f2601c8945258e2533ea47e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWindows$_16_.dll
    .dll windows:4 windows x86 arch:x86

    6281e52b0c4bb0e07b335d86fc902d2e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/winhttp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    86660019029121b29ff1b3398c0c83d4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Origin.VisualElementsManifest.xml
  • $TEMP/Origin.exe
    .exe windows:5 windows x86 arch:x86

    87c2f22aaa051eea5d178e91d7470c6d


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/OriginUninstall.exe
    .exe windows:5 windows x86 arch:x86

    bd0641e21b10edfc0a54866bde1ee66c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $TEMP/installerdll$_18_.dll
    .dll windows:6 windows x86 arch:x86

    6706a3794a9800386a1895fc34eccde5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/WindowsInstaller-KB893803-v2-x86.exe
    .exe windows:6 windows x86 arch:x86

    f676e16c67a815430fbcd6d520ece6e4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/installerdll$_18_.dll
    .dll windows:6 windows x86 arch:x86

    6706a3794a9800386a1895fc34eccde5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/rootsupd.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x64_vs2013.exe
    .exe windows:5 windows x86 arch:x86

    dcbe94b8cc54b8e53867c61cc96811d6


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x86_vs2013.exe
    .exe windows:5 windows x86 arch:x86

    dcbe94b8cc54b8e53867c61cc96811d6


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/installerdll$_16_.dll
    .dll windows:6 windows x86 arch:x86

    6706a3794a9800386a1895fc34eccde5


    Code Sign

    Headers

    Imports

    Exports

    Sections