General

  • Target

    a723586e9ff90ddabaee02db4307feee_JaffaCakes118

  • Size

    30.8MB

  • MD5

    a723586e9ff90ddabaee02db4307feee

  • SHA1

    0a2e14c05fedd005ac55836e4b0fcfc12ab7c3ea

  • SHA256

    f59499d4765986dddf5595c89919546c6e3152182ccc6b9f71265a697ff96364

  • SHA512

    3b5f99fb54cb33238d0d040e0fda633a6f97f3b1f84f3fe121bccdc7965f86b6b87f854968b29f5cd3c338ba739642b34cf1ca98f60e918f64dff2ed31a07131

  • SSDEEP

    786432:LdJNwqRNEzWn1Pt8iN2Jh8bQ1sKV9cJMa506EuxTx:xJNwqZ1Pt8i280zkT5hxl

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 2 IoCs
  • Unsigned PE 70 IoCs

    Checks for missing Authenticode signature.

Files

  • a723586e9ff90ddabaee02db4307feee_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $TEMP/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections

  • Crypto.Cipher._AES.pyd
    .dll windows:5 windows x86 arch:x86

    366296ca8147c21931caa88b5989347c


    Headers

    Imports

    Exports

    Sections

  • Include/pyconfig.h
  • LIBEAY32.dll
    .dll windows:5 windows x86 arch:x86

    8854f076f54b914555538520497b053d


    Headers

    Imports

    Exports

    Sections

  • MSVCP100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVCR100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PyQt5.Qt.pyd
    .dll windows:5 windows x86 arch:x86

    a4d4c16881549966e246b9fe23a518e4


    Headers

    Imports

    Exports

    Sections

  • PyQt5.QtCore.pyd
    .dll windows:5 windows x86 arch:x86

    885edb0255df9033b1be4f9ec16b6370


    Headers

    Imports

    Exports

    Sections

  • PyQt5.QtGui.pyd
    .dll windows:5 windows x86 arch:x86

    1f2b0181b729245edfc995805ef29f9c


    Headers

    Imports

    Exports

    Sections

  • PyQt5.QtNetwork.pyd
    .dll windows:5 windows x86 arch:x86

    a9358bd8968268d8b938e3fce9a7b4aa


    Headers

    Imports

    Exports

    Sections

  • PyQt5.QtPrintSupport.pyd
    .dll windows:5 windows x86 arch:x86

    27f05f18872a503531f62a5bbbcd61e5


    Headers

    Imports

    Exports

    Sections

  • PyQt5.QtWebKit.pyd
    .dll windows:5 windows x86 arch:x86

    6cd4274cf11a62f1cca2422014f907fc


    Headers

    Imports

    Exports

    Sections

  • PyQt5.QtWebKitWidgets.pyd
    .dll windows:5 windows x86 arch:x86

    196cf1f96e85a346bd0ddd4679ebfa06


    Headers

    Imports

    Exports

    Sections

  • PyQt5.QtWidgets.pyd
    .dll windows:5 windows x86 arch:x86

    4413f992da92cec55c0b3176f681d1d3


    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:5 windows x86 arch:x86

    89955285f90bfb34a8010841107617d7


    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:5 windows x86 arch:x86

    e1b57a18fb86d92f7c0753e0a9510638


    Headers

    Imports

    Exports

    Sections

  • Qt5Multimedia.dll
    .dll windows:5 windows x86 arch:x86

    898cf9601c6f4a564daa8199b9b84c51


    Headers

    Imports

    Exports

    Sections

  • Qt5MultimediaWidgets.dll
    .dll windows:5 windows x86 arch:x86

    9e0f313808a86aa35cedcee45bf18381


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:5 windows x86 arch:x86

    9027cd50fcd92e3cda4047b4174cc543


    Headers

    Imports

    Exports

    Sections

  • Qt5OpenGL.dll
    .dll windows:5 windows x86 arch:x86

    8021547dea7b2cfa8772c87a6817b20c


    Headers

    Imports

    Exports

    Sections

  • Qt5Positioning.dll
    .dll windows:5 windows x86 arch:x86

    8ce83fd3d0a9032e20f053e9904444e0


    Headers

    Imports

    Exports

    Sections

  • Qt5PrintSupport.dll
    .dll windows:5 windows x86 arch:x86

    25cf4cbe29d77dad494e8c155d0c7313


    Headers

    Imports

    Exports

    Sections

  • Qt5Qml.dll
    .dll windows:5 windows x86 arch:x86

    8b1946fcb1362a87f8bdcf86f9b8d91e


    Headers

    Imports

    Exports

    Sections

  • Qt5Quick.dll
    .dll windows:5 windows x86 arch:x86

    072780a0e32bfeec2d0fe3a65620c5fe


    Headers

    Imports

    Exports

    Sections

  • Qt5Sensors.dll
    .dll windows:5 windows x86 arch:x86

    679456d32b7450b120e1c56ef2f9e29b


    Headers

    Imports

    Exports

    Sections

  • Qt5Sql.dll
    .dll windows:5 windows x86 arch:x86

    bf2f5f591fb77eaf0aaa47d1797d987d


    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:5 windows x86 arch:x86

    2f4c11ec7a29e2ef3a8978d89e8ab8d4


    Headers

    Imports

    Exports

    Sections

  • Qt5WebChannel.dll
    .dll windows:5 windows x86 arch:x86

    bc87d7b13587eb6107576a405cc1114d


    Headers

    Imports

    Exports

    Sections

  • Qt5WebKit.dll
    .dll windows:5 windows x86 arch:x86

    09f8e8741655018b3adc9904c2a20e4b


    Headers

    Imports

    Exports

    Sections

  • Qt5WebKitWidgets.dll
    .dll windows:5 windows x86 arch:x86

    b14d1e11d848a96477818f8977a90693


    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:5 windows x86 arch:x86

    e56515158882dc569f946a3d30769ea4


    Headers

    Imports

    Exports

    Sections

  • SSLEAY32.dll
    .dll windows:5 windows x86 arch:x86

    00d1897bd7e457a625ab6f3e8726bd09


    Headers

    Imports

    Exports

    Sections

  • _bz2.pyd
    .dll windows:5 windows x86 arch:x86

    1144b45b39656469503a9c517deff4fb


    Headers

    Imports

    Exports

    Sections

  • _ctypes.pyd
    .dll windows:5 windows x86 arch:x86

    acc7a15675979e1bb3298e16aecbb34f


    Headers

    Imports

    Exports

    Sections

  • _hashlib.pyd
    .dll windows:5 windows x86 arch:x86

    b2aed5ed803462252af6fda6f20980fd


    Headers

    Imports

    Exports

    Sections

  • _lzma.pyd
    .dll windows:5 windows x86 arch:x86

    cd1f1ac2a105cdc28d70746e625e6dfa


    Headers

    Imports

    Exports

    Sections

  • _multiprocessing.pyd
    .dll windows:5 windows x86 arch:x86

    34971782dd6e5a6c5497fa15efb80517


    Headers

    Imports

    Exports

    Sections

  • _socket.pyd
    .dll .js windows:5 windows x86 arch:x86 polyglot

    e383dec1c760c39c6e88305da21dd8f7


    Headers

    Imports

    Exports

    Sections

  • _ssl.pyd
    .dll windows:5 windows x86 arch:x86

    a06529bf96457400394751f1ed655a48


    Headers

    Imports

    Exports

    Sections

  • base_library.zip
    .zip
  • _bootlocale.pyc
  • _collections_abc.pyc
  • _weakrefset.pyc
  • abc.pyc
  • codecs.pyc
  • collections/__init__.pyc
  • collections/__main__.pyc
  • collections/abc.pyc
  • copyreg.pyc
  • encodings/__init__.pyc
  • encodings/aliases.pyc
  • encodings/ascii.pyc
  • encodings/base64_codec.pyc
  • encodings/big5.pyc
  • encodings/big5hkscs.pyc
  • encodings/bz2_codec.pyc
  • encodings/charmap.pyc
  • encodings/cp037.pyc
  • encodings/cp1006.pyc
  • encodings/cp1026.pyc
  • encodings/cp1125.pyc
  • encodings/cp1140.pyc
  • encodings/cp1250.pyc
  • encodings/cp1251.pyc
  • encodings/cp1252.pyc
  • encodings/cp1253.pyc
  • encodings/cp1254.pyc
  • encodings/cp1255.pyc
  • encodings/cp1256.pyc
  • encodings/cp1257.pyc
  • encodings/cp1258.pyc
  • encodings/cp273.pyc
  • encodings/cp424.pyc
  • encodings/cp437.pyc
  • encodings/cp500.pyc
  • encodings/cp65001.pyc
  • encodings/cp720.pyc
  • encodings/cp737.pyc
  • encodings/cp775.pyc
  • encodings/cp850.pyc
  • encodings/cp852.pyc
  • encodings/cp855.pyc
  • encodings/cp856.pyc
  • encodings/cp857.pyc
  • encodings/cp858.pyc
  • encodings/cp860.pyc
  • encodings/cp861.pyc
  • encodings/cp862.pyc
  • encodings/cp863.pyc
  • encodings/cp864.pyc
  • encodings/cp865.pyc
  • encodings/cp866.pyc
  • encodings/cp869.pyc
  • encodings/cp874.pyc
  • encodings/cp875.pyc
  • encodings/cp932.pyc
  • encodings/cp949.pyc
  • encodings/cp950.pyc
  • encodings/euc_jis_2004.pyc
  • encodings/euc_jisx0213.pyc
  • encodings/euc_jp.pyc
  • encodings/euc_kr.pyc
  • encodings/gb18030.pyc
  • encodings/gb2312.pyc
  • encodings/gbk.pyc
  • encodings/hex_codec.pyc
  • encodings/hp_roman8.pyc
  • encodings/hz.pyc
  • encodings/idna.pyc
  • encodings/iso2022_jp.pyc
  • encodings/iso2022_jp_1.pyc
  • encodings/iso2022_jp_2.pyc
  • encodings/iso2022_jp_2004.pyc
  • encodings/iso2022_jp_3.pyc
  • encodings/iso2022_jp_ext.pyc
  • encodings/iso2022_kr.pyc
  • encodings/iso8859_1.pyc
  • encodings/iso8859_10.pyc
  • encodings/iso8859_11.pyc
  • encodings/iso8859_13.pyc
  • encodings/iso8859_14.pyc
  • encodings/iso8859_15.pyc
  • encodings/iso8859_16.pyc
  • encodings/iso8859_2.pyc
  • encodings/iso8859_3.pyc
  • encodings/iso8859_4.pyc
  • encodings/iso8859_5.pyc
  • encodings/iso8859_6.pyc
  • encodings/iso8859_7.pyc
  • encodings/iso8859_8.pyc
  • encodings/iso8859_9.pyc
  • encodings/johab.pyc
  • encodings/koi8_r.pyc
  • encodings/koi8_u.pyc
  • encodings/latin_1.pyc
  • encodings/mac_arabic.pyc
  • encodings/mac_centeuro.pyc
  • encodings/mac_croatian.pyc
  • encodings/mac_cyrillic.pyc
  • encodings/mac_farsi.pyc
  • encodings/mac_greek.pyc
  • encodings/mac_iceland.pyc
  • encodings/mac_latin2.pyc
  • encodings/mac_roman.pyc
  • encodings/mac_romanian.pyc
  • encodings/mac_turkish.pyc
  • encodings/mbcs.pyc
  • encodings/palmos.pyc
  • encodings/ptcp154.pyc
  • encodings/punycode.pyc
  • encodings/quopri_codec.pyc
  • encodings/raw_unicode_escape.pyc
  • encodings/rot_13.pyc
  • encodings/shift_jis.pyc
  • encodings/shift_jis_2004.pyc
  • encodings/shift_jisx0213.pyc
  • encodings/tis_620.pyc
  • encodings/undefined.pyc
  • encodings/unicode_escape.pyc
  • encodings/unicode_internal.pyc
  • encodings/utf_16.pyc
  • encodings/utf_16_be.pyc
  • encodings/utf_16_le.pyc
  • encodings/utf_32.pyc
  • encodings/utf_32_be.pyc
  • encodings/utf_32_le.pyc
  • encodings/utf_7.pyc
  • encodings/utf_8.pyc
  • encodings/utf_8_sig.pyc
  • encodings/uu_codec.pyc
  • encodings/zlib_codec.pyc
  • functools.pyc
  • heapq.pyc
  • io.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • operator.pyc
  • re.pyc
  • reprlib.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • traceback.pyc
  • types.pyc
  • weakref.pyc
  • betcity.exe
    .exe windows:4 windows x86 arch:x86

    05a03ed18d2e75f8c4f1c5bcf287ac56


    Headers

    Imports

    Sections

  • betcity.pyc
  • betcity.exe.manifest
    .xml
  • icudt53.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • icuin53.dll
    .dll windows:5 windows x86 arch:x86

    da9b170775031899c0b35b7146601f35


    Headers

    Imports

    Exports

    Sections

  • icuuc53.dll
    .dll windows:5 windows x86 arch:x86

    c6fc9fa2ee8e603e54dfed2846227a5a


    Headers

    Imports

    Exports

    Sections

  • pyexpat.pyd
    .dll windows:5 windows x86 arch:x86

    69449940477a488a415b309bd52a8046


    Headers

    Imports

    Exports

    Sections

  • python34.dll
    .dll windows:5 windows x86 arch:x86

    bf31f75de465e5022a052fd959325045


    Headers

    Imports

    Exports

    Sections

  • pywintypes34.dll
    .dll windows:5 windows x86 arch:x86

    3de2e580bd93aed5eb6506d819d3df3d


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/bearer/qgenericbearer.dll
    .dll windows:5 windows x86 arch:x86

    c22c70ad02c80a8ded51ef4fdbb7996e


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/bearer/qnativewifibearer.dll
    .dll windows:5 windows x86 arch:x86

    729b4915f912a88ac28ec2b074068513


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/iconengines/qsvgicon.dll
    .dll windows:5 windows x86 arch:x86

    1759cb843f91d6f8fd491a47780aa607


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qdds.dll
    .dll windows:5 windows x86 arch:x86

    022d6e490d4912fca74ee8f1cb9b827a


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qgif.dll
    .dll windows:5 windows x86 arch:x86

    554666c3e5d7538cd568a5cf6c45226d


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qicns.dll
    .dll windows:5 windows x86 arch:x86

    b584d6b652230efbda29eea6092810db


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qico.dll
    .dll windows:5 windows x86 arch:x86

    35e242f661b7c3fd36ec7cd263815733


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qjp2.dll
    .dll windows:5 windows x86 arch:x86

    dc53e938893705dbb783117753697b3f


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qjpeg.dll
    .dll windows:5 windows x86 arch:x86

    ed0830eb15bb337f07aa8b82897802f4


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qmng.dll
    .dll windows:5 windows x86 arch:x86

    dd991fe6aa5d6963167265525fb65fe7


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qsvg.dll
    .dll windows:5 windows x86 arch:x86

    c2025b167f7bbf3738bc4216af984378


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qtga.dll
    .dll windows:5 windows x86 arch:x86

    62b7a5c2397a25827047e1666b09154f


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qtiff.dll
    .dll windows:5 windows x86 arch:x86

    6b9592c4378bc3bb86a1eb934608b5da


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qwbmp.dll
    .dll windows:5 windows x86 arch:x86

    76bc87089da6c4313268bb66c13c61f2


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/imageformats/qwebp.dll
    .dll windows:5 windows x86 arch:x86

    7c1ec1d728e370287d23c25cc1c6e131


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/platforms/qminimal.dll
    .dll windows:5 windows x86 arch:x86

    e6495cd1439a1feea9cfbd6693ff4adb


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/platforms/qoffscreen.dll
    .dll windows:5 windows x86 arch:x86

    0b6faeccf176e162ce129021e3199823


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/platforms/qwindows.dll
    .dll windows:5 windows x86 arch:x86

    c69121304670a7de737f39faeafaf233


    Headers

    Imports

    Exports

    Sections

  • qt5_plugins/printsupport/windowsprintersupport.dll
    .dll windows:5 windows x86 arch:x86

    5b543a784f6ccf9282ffae80b9d9203b


    Headers

    Imports

    Exports

    Sections

  • select.pyd
    .dll windows:5 windows x86 arch:x86

    1a29e10efc54a9291da0e908d2c68818


    Headers

    Imports

    Exports

    Sections

  • sip.pyd
    .dll windows:5 windows x86 arch:x86

    5bfc044acb0d57053461ac4529c7b90b


    Headers

    Imports

    Exports

    Sections

  • unicodedata.pyd
    .dll windows:5 windows x86 arch:x86

    a01f425d4ee41eb620b69d752384032a


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • upd.exe
    .exe windows:4 windows x86 arch:x86

    c8968748bf6183e3c66062912a824b6e


    Headers

    Imports

    Sections

  • upd.pyc
  • version.txt
  • win32api.pyd
    .dll windows:5 windows x86 arch:x86

    5d9a1d765e8f948771302facaf23c63e


    Headers

    Imports

    Exports

    Sections

  • win32evtlog.pyd
    .dll windows:5 windows x86 arch:x86

    d4baf65ffcfb28966338efa3e5f24417


    Headers

    Imports

    Exports

    Sections