General

  • Target

    9d7fd40b08711a33856e7e45a763791a_JaffaCakes118

  • Size

    3.1MB

  • MD5

    9d7fd40b08711a33856e7e45a763791a

  • SHA1

    d8f2f90396c40e986f6eb726c4a5bd65212658b4

  • SHA256

    27e2fe5aa4ce175c3c733ce6f73b9dc30bf458d9ca4d69d4f4f5a4ef69a69df8

  • SHA512

    7c0b5e2632f79cbba2062412c2a7c91d850a58d1cc19a18450ce33620d1e4c701fe4b230c24c93216f348c478806e1938017a1c8427239015465e9d15d4f5a54

  • SSDEEP

    49152:IuIHNODLfZ3rwsBvl0BG7uazUm9CkYVThYD21uOBfzBmHsf34BbnEku:IuIoDL+2l1CkkT6yuU1Yq34dnO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9d7fd40b08711a33856e7e45a763791a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    076b06e6a65c9b7cca5a61be0cd82165


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • Aspell/aspell-languages.csv
  • Aspell/data/cp1250.cmap
  • Aspell/data/cp1250.cset
  • Aspell/data/cp1251.cmap
  • Aspell/data/cp1251.cset
  • Aspell/data/cp1252.cmap
  • Aspell/data/cp1252.cset
  • Aspell/data/cp1253.cmap
  • Aspell/data/cp1253.cset
  • Aspell/data/cp1254.cmap
  • Aspell/data/cp1254.cset
  • Aspell/data/cp1255.cmap
  • Aspell/data/cp1255.cset
  • Aspell/data/cp1256.cmap
  • Aspell/data/cp1256.cset
  • Aspell/data/cp1257.cmap
  • Aspell/data/cp1257.cset
  • Aspell/data/cp1258.cmap
  • Aspell/data/cp1258.cset
  • Aspell/data/dvorak.kbd
  • Aspell/data/iso-8859-1.cmap
  • Aspell/data/iso-8859-1.cset
  • Aspell/data/iso-8859-10.cmap
  • Aspell/data/iso-8859-10.cset
  • Aspell/data/iso-8859-11.cmap
  • Aspell/data/iso-8859-11.cset
  • Aspell/data/iso-8859-13.cmap
  • Aspell/data/iso-8859-13.cset
  • Aspell/data/iso-8859-14.cmap
  • Aspell/data/iso-8859-14.cset
  • Aspell/data/iso-8859-15.cmap
  • Aspell/data/iso-8859-15.cset
  • Aspell/data/iso-8859-16.cmap
  • Aspell/data/iso-8859-16.cset
  • Aspell/data/iso-8859-2.cmap
  • Aspell/data/iso-8859-2.cset
  • Aspell/data/iso-8859-3.cmap
  • Aspell/data/iso-8859-3.cset
  • Aspell/data/iso-8859-4.cmap
  • Aspell/data/iso-8859-4.cset
  • Aspell/data/iso-8859-5.cmap
  • Aspell/data/iso-8859-5.cset
  • Aspell/data/iso-8859-6.cmap
  • Aspell/data/iso-8859-6.cset
  • Aspell/data/iso-8859-7.cmap
  • Aspell/data/iso-8859-7.cset
  • Aspell/data/iso-8859-8.cmap
  • Aspell/data/iso-8859-8.cset
  • Aspell/data/iso-8859-9.cmap
  • Aspell/data/iso-8859-9.cset
  • Aspell/data/koi8-r.cmap
  • Aspell/data/koi8-r.cset
  • Aspell/data/koi8-u.cmap
  • Aspell/data/koi8-u.cset
  • Aspell/data/split.kbd
  • Aspell/data/standard.kbd
  • Help/calendar.html
    .html
  • Help/contacts.html
    .html
  • Help/email.html
    .html
  • Help/features.html
    .html
  • Help/filters.html
    .html
  • Help/help.css
  • Help/import.html
    .html
  • Help/index.html
    .html
  • Help/install.html
    .html
  • Help/intro.html
    .html
  • Help/menu.html
    .html
  • Help/plugins.html
    .html
  • Help/print.html
    .html
  • Help/scripting.html
    .html
  • Help/scripting/index.html
    .html
  • Help/scripting/library.html
    .html
  • Help/scripting/scripting.css
  • Help/scripting/syntax.html
    .html
  • Help/ui.html
    .html
  • Lgi9x32nop.dll
    .dll windows:5 windows x86 arch:x86

    9b5859858cc260fb04d6e0dfc96b8941


    Headers

    Imports

    Exports

    Sections

  • Resources/About.html
    .html
  • Resources/About64px.png
    .png
  • Resources/EmojiMap.png
    .png
  • Resources/Flags.gif
    .gif
  • Resources/Icons.gif
    .gif
  • Resources/NoFace160.png
    .png
  • Resources/NoFace80.png
    .png
  • Resources/PreviewContact.html
    .html
  • Resources/PreviewMail.html
    .html
  • Resources/Scribe.lr8
    .xml
  • Resources/Title.gif
    .gif
  • Resources/Title.html
    .html
  • Resources/xgate-icons-32.png
    .png
  • Scribe.exe
    .exe windows:5 windows x86 arch:x86

    44ce7eba1fb2908621df3a9e755c23bf


    Headers

    Imports

    Exports

    Sections

  • ScribeMapi.dll
    .dll windows:5 windows x86 arch:x86

    84cf142faf7c6eddcf60b152177c1895


    Headers

    Imports

    Exports

    Sections

  • Scripts/Add Senders To Contacts.script
  • Scripts/Api.html
    .html
  • Scripts/Delete Attachments.script
  • Scripts/Delete Duplicate Messages.script
  • Scripts/Dom.txt
  • Scripts/Mail Filters Menu.script
  • Scripts/resdefs.h
  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    bf8e7031dd4d872b0842601addd0b97d


    Headers

    Imports

    Sections

  • aspell-dist-0.60.dll
    .dll windows:5 windows x86 arch:x86

    cb2ab8faaa789f26c4f187e91da7ed22


    Headers

    Imports

    Exports

    Sections

  • libntlm9.dll
    .dll windows:5 windows x86 arch:x86

    e12f6485c209bf313515c3fa26a17be5


    Headers

    Imports

    Exports

    Sections

  • libpng9x32.dll
    .dll windows:5 windows x86 arch:x86

    d7844c8d718652a8074d6d94890791df


    Headers

    Imports

    Exports

    Sections

  • zlib9x32.dll
    .dll windows:5 windows x86 arch:x86

    f589f8e9c7fcbc0482c55324795405d4


    Headers

    Imports

    Exports

    Sections