General

  • Target
    8e048607275f42adff61e4adfee9df0c_JaffaCakes118
  • Size 943KB
  • Sample240602-n83alscb4w
  • SHA256 502a0e685078b5c44fd566ea2f14c7f998fbb1d04f6527a5c289bc661e6b9944
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • 8e048607275f42adff61e4adfee9df0c_JaffaCakes118
    .exe 943KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • 15.png
    .png 640B
  • 405.htm
    .html 1KB
  • 8.svg
    .xml 1KB
  • Adobe-Japan1-5
    4KB
  • Alienage.e
    3KB
  • CZE.zdct
    1KB
  • Chihuahua
    816B
  • ConflictingProcesses
    33B
  • Copyright
    3KB
  • HEB.zdct
    1KB
  • Havana
    1KB
  • JPEG High.irs
    1KB
  • Jaundice.R
    1.7MB
  • Johannesburg
    105B
  • Kaliningrad
    681B
  • Knox
    1KB
  • Matamoros
    788B
  • SFhelper.dll
    .dll 54KB
  • SampleUnmanagedApp4.cpp
    2KB
  • San_Juan
    557B
  • SimpleDocument3.xml
    .xml 262B
  • VertexInputTexturelessInstanced.hlsli
    342B
  • Wake
    65B
  • aboutImage.png
    .png 4KB
  • ade.extensions.xml
    .xml 1KB
  • api-doc.xml
    .xml 3KB
  • appbar.eve
    3KB
  • arrow_right_disabled.png
    .png 1KB
  • basic.css
    2KB
  • circle_glass_Thumbnail.bmp
    4KB
  • diagnostic_test.png
    .png 1KB
  • docbook-xsl-update
    .sh 1KB
  • f30.png
    .png 1KB
  • head.js
    25B
  • headers.on.blank.pages.xml
    905B
  • helloworld.fo
    .xml 1KB
  • htmlhelp.button.forward.xml
    930B
  • index.entry.properties.xml
    1KB
  • june.xml
    .xml 2KB
  • navig.graphics.extension.xml
    983B
  • networkEventSubscribe.jsx
    .js 552B
  • nl.pak
    4KB
  • parse_modified.js
    .js 249B
  • root.js
    .js 480B
  • run_script.png
    .png 4KB
  • sections-spec.xml
    1KB
  • slides-w3c.css
    27B
  • systemInformationReport.png
    .png 4KB
  • tex.math.delims.xml
    1KB
  • toc.line.properties.xml
    1KB
  • tweakBIOSDriversFirmwareUpdate_ja.p5p
    878B

8e048607275f42adff61e4adfee9df0c_JaffaCakes118

  • IMPHASH e160ef8e55bb9d162da4e266afd9eef3
  • SHA256 502a0e685078b5c44fd566ea2f14c7f998fbb1d04f6527a5c289bc661e6b9944
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths