General

  • Target

    a7cd9a8f2d4588618646177883fc490e_JaffaCakes118

  • Size

    5.2MB

  • MD5

    a7cd9a8f2d4588618646177883fc490e

  • SHA1

    ab3a6866c21b95681042ed7adee169f64902dfb8

  • SHA256

    e4abf9c3a8be583b4c7085f13c556c099ea8480f68f8c4596bd286ddca3f79af

  • SHA512

    5307035775fb6382f3e95ab8eb5c62bf643c036631d9f1389d558e69c36db5e61a4928fa2454bf0902e7856abee7cc89507ada31c376969d3ef518bf85713b3f

  • SSDEEP

    98304:9MMI7FPHq0/fypLy2LqlO4Djko9m6ez66U8M6EMhbmWch90Wrr6slKMt6cFflV+/:9MNyu2LynlO8koMFzZU8mYSn9QscMs6q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • a7cd9a8f2d4588618646177883fc490e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    ed83f419402bc3b83a08e3aaf8b5b5b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • bin/QtCore4.dll
    .dll windows:4 windows x86 arch:x86

    e469e7688b46bbb6f874f109595bfa9a


    Headers

    Imports

    Exports

    Sections

  • bin/QtGui4.dll
    .dll windows:4 windows x86 arch:x86

    469fb6cafa244442c0bc0ccf677c4fe0


    Headers

    Imports

    Exports

    Sections

  • bin/dupscout.exe
    .exe windows:4 windows x86 arch:x86

    1d1213dbeb67aadfeb10dbe533a16e41


    Headers

    Imports

    Exports

    Sections

  • bin/dupscoutsrv.flx
  • bin/dupsct.ico
  • bin/dupsctc.exe
    .exe windows:4 windows x86 arch:x86

    8126d5edcbb69dc4971552d266951c47


    Headers

    Imports

    Exports

    Sections

  • bin/dupsctc.exe.manifest
    .xml
  • bin/dupscts.exe
    .exe windows:4 windows x86 arch:x86

    80edaec442c1eea91b2b4cd25022f583


    Headers

    Imports

    Exports

    Sections

  • bin/libdpg.dll
    .dll windows:4 windows x86 arch:x86

    61c1f37246f99da792b3b180be8ed812


    Headers

    Imports

    Exports

    Sections

  • bin/libdup.dll
    .dll windows:4 windows x86 arch:x86

    bddb62270de1c5fe6398d8e1c877e9bf


    Headers

    Imports

    Exports

    Sections

  • bin/libpal.dll
    .dll windows:4 windows x86 arch:x86

    583af722337b7624753a7369f07f7c6e


    Headers

    Imports

    Exports

    Sections

  • bin/libspg.dll
    .dll windows:4 windows x86 arch:x86

    c367295a9b8d41c922c373cf113357cd


    Headers

    Imports

    Exports

    Sections

  • bin/libspp.dll
    .dll windows:4 windows x86 arch:x86

    82a5da1d6905279ed73d4435983769e7


    Headers

    Imports

    Exports

    Sections

  • bin/sppinst.exe
    .exe windows:4 windows x86 arch:x86

    7e7f6d66c37ed14b9fe73b6325243ccd


    Headers

    Imports

    Exports

    Sections

  • flexense_license.txt
  • plugins/Access Date Classification Plugin.flx
  • plugins/Access Time Classification Plugin.flx
  • plugins/Creation Date Classification Plugin.flx
  • plugins/Creation Time Classification Plugin.flx
  • plugins/Default File Classification Plugin.flx
  • plugins/Extension-Based Classification Plugin.flx
  • plugins/Hidden Movies and Video Files.flx
  • plugins/Hidden Music and Audio Files.flx
  • plugins/Hidden Pictures and Image Files.flx
  • plugins/Modification Date Classification Plugin.flx
  • plugins/Modification Time Classification Plugin.flx
  • plugins/Movies and Video Files.flx
  • plugins/Music and Audio Files.flx
  • plugins/Pictures and Image Files.flx
  • plugins/Simple File Classification Plugin.flx
  • plugins/Size-Based Classification Plugin.flx
  • plugins/User-Based Classification Plugin.flx
  • templates/report_footer.html
  • templates/report_header.html
    .html
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp