General

  • Target

    98ac73476dc54d1b1a9724dfee21937d_JaffaCakes118

  • Size

    14.4MB

  • MD5

    98ac73476dc54d1b1a9724dfee21937d

  • SHA1

    0617a155b62e5dff36303d30b74778bb98f5c916

  • SHA256

    38e60c3df9c4a63c4413d66867b16244c2be35e5ae35dcb23dcb96be3fcb516b

  • SHA512

    6652dc724abc574be514fd9f30b9339bc6d5446a7d57a44e2e7c5d68cda8e472a5d693e73a238c93bc2149835c1287085a8107e40823597e15f4c04fa14a5349

  • SSDEEP

    393216:A0ZWUvZW2hjN39gziFkogTfylkZZhagWSDJPoyTXpU:ATUk25luDTfyWZXa5ihz+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 98ac73476dc54d1b1a9724dfee21937d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • 72c3d354-d3a2-43dd-a647-9eb167014660.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Bulgarian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Croatian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Czech.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Danish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Dutch.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/English.xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Finnish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/French.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/German.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Greek.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Hungarian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Indonesian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Italian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Japanese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Korean.xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Norwegian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Polish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Portuguese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Romanian.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Russian.xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/SimpChinese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Spanish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Swedish.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Thai.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/TradChinese.xml
    .xml
  • $APPDATA/WinZip/WinZip Registry Optimizer/Language/Turkish.xml
    .xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    d3b0357e5a9df93304cb6f852ecac3b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsSessionSIDW.dll
    .dll windows:5 windows x86 arch:x86

    b3031de3a4e382143eb2236474719dea


    Headers

    Imports

    Exports

    Sections

  • FileExtensionManager-vc141-mt.dll
    .dll windows:6 windows x64 arch:x64

    c27087b3bafbb1ede648913f85d193aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FileExtensionManager-vc141-mt.mab
  • RONotifier.exe
    .exe windows:6 windows x64 arch:x64

    211c085dcb1711f4f8bc736f1d9495d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RONotifier.mab
  • RONotifierTray.exe
    .exe windows:6 windows x64 arch:x64

    a0975c79fb22d0bc44718127f7bccae9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RONotifierTray.mab
  • RegistryOptimizer.exe
    .exe windows:6 windows x64 arch:x64

    283d50c822895d094fc93341a43212bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RegistryOptimizer.mab
  • RegistryOptimizerUpdater.exe
    .exe windows:6 windows x64 arch:x64

    e3cad74c682d9d64e7b77ea261a21e05


    Code Sign

    Headers

    Imports

    Sections

  • RegistryOptimizerUpdater.mab
  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsEnvVariables.dll
    .dll windows:5 windows x86 arch:x86

    211e16547fae1d5f51bf909bfc524385


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    02dceff3de5d2175177a78f2eb554a86


    Headers

    Imports

    Exports

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    0e53a682f1331df9628488b9ca56f28b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    adf99b9ea3a1f76c33522f96772bc4dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • system_excludes
  • ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    57abd1fde351971a01e912069e11b44c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    22d5f5a59536f7b488c92896a4d858ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    2cb5da5225e972a08f32d04b8085dc7e


    Code Sign

    Headers

    Imports

    Exports

    Sections