General

  • Target

    a8cbc2ccfdebac341c5c42746d79e202_JaffaCakes118

  • Size

    3.1MB

  • MD5

    a8cbc2ccfdebac341c5c42746d79e202

  • SHA1

    649ee5a9138b2fa00f6711ac53445bce44b3c904

  • SHA256

    71ef42e112b5671d75c71c0c0ac9bc1b458625fb9193bca8bbf2776d44f93952

  • SHA512

    ceed3eeefce4bfbe32911378629e6249d1e03fac40d0367367312390fd96617361db3244a33862a23b77867d80eb3d3d59f5b5b9f3e2bcebf901331ebbedf159

  • SSDEEP

    49152:/Uor1hpbW9nxz32T8ATkMQyDS3aOiNGzYkuOBfvyBmHsf34BbnEkf:/UyuNGQAosKaOio1uUoYq34dn/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a8cbc2ccfdebac341c5c42746d79e202_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    076b06e6a65c9b7cca5a61be0cd82165


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • Aspell/aspell-languages.csv
  • Aspell/data/cp1250.cmap
  • Aspell/data/cp1250.cset
  • Aspell/data/cp1251.cmap
  • Aspell/data/cp1251.cset
  • Aspell/data/cp1252.cmap
  • Aspell/data/cp1252.cset
  • Aspell/data/cp1253.cmap
  • Aspell/data/cp1253.cset
  • Aspell/data/cp1254.cmap
  • Aspell/data/cp1254.cset
  • Aspell/data/cp1255.cmap
  • Aspell/data/cp1255.cset
  • Aspell/data/cp1256.cmap
  • Aspell/data/cp1256.cset
  • Aspell/data/cp1257.cmap
  • Aspell/data/cp1257.cset
  • Aspell/data/cp1258.cmap
  • Aspell/data/cp1258.cset
  • Aspell/data/dvorak.kbd
  • Aspell/data/iso-8859-1.cmap
  • Aspell/data/iso-8859-1.cset
  • Aspell/data/iso-8859-10.cmap
  • Aspell/data/iso-8859-10.cset
  • Aspell/data/iso-8859-11.cmap
  • Aspell/data/iso-8859-11.cset
  • Aspell/data/iso-8859-13.cmap
  • Aspell/data/iso-8859-13.cset
  • Aspell/data/iso-8859-14.cmap
  • Aspell/data/iso-8859-14.cset
  • Aspell/data/iso-8859-15.cmap
  • Aspell/data/iso-8859-15.cset
  • Aspell/data/iso-8859-16.cmap
  • Aspell/data/iso-8859-16.cset
  • Aspell/data/iso-8859-2.cmap
  • Aspell/data/iso-8859-2.cset
  • Aspell/data/iso-8859-3.cmap
  • Aspell/data/iso-8859-3.cset
  • Aspell/data/iso-8859-4.cmap
  • Aspell/data/iso-8859-4.cset
  • Aspell/data/iso-8859-5.cmap
  • Aspell/data/iso-8859-5.cset
  • Aspell/data/iso-8859-6.cmap
  • Aspell/data/iso-8859-6.cset
  • Aspell/data/iso-8859-7.cmap
  • Aspell/data/iso-8859-7.cset
  • Aspell/data/iso-8859-8.cmap
  • Aspell/data/iso-8859-8.cset
  • Aspell/data/iso-8859-9.cmap
  • Aspell/data/iso-8859-9.cset
  • Aspell/data/koi8-r.cmap
  • Aspell/data/koi8-r.cset
  • Aspell/data/koi8-u.cmap
  • Aspell/data/koi8-u.cset
  • Aspell/data/split.kbd
  • Aspell/data/standard.kbd
  • Help/calendar.html
    .html
  • Help/contacts.html
    .html
  • Help/email.html
    .html
  • Help/features.html
    .html
  • Help/filters.html
    .html
  • Help/help.css
  • Help/import.html
    .html
  • Help/index.html
    .html
  • Help/install.html
    .html
  • Help/intro.html
    .html
  • Help/menu.html
    .html
  • Help/plugins.html
    .html
  • Help/print.html
    .html
  • Help/scripting.html
    .html
  • Help/scripting/index.html
    .html
  • Help/scripting/library.html
    .html
  • Help/scripting/scripting.css
  • Help/scripting/syntax.html
    .html
  • Help/ui.html
    .html
  • Lgi9x32nop.dll
    .dll windows:5 windows x86 arch:x86

    3db128f4013e0ab4d810f52cb0c93506


    Headers

    Imports

    Exports

    Sections

  • Resources/About.html
    .html
  • Resources/About64px.png
    .png
  • Resources/EmojiMap.png
    .png
  • Resources/Flags.gif
    .gif
  • Resources/Icons.gif
    .gif
  • Resources/NoFace160.png
    .png
  • Resources/NoFace80.png
    .png
  • Resources/PreviewContact.html
    .html
  • Resources/PreviewMail.html
    .html
  • Resources/Scribe.lr8
    .xml
  • Resources/Title.gif
    .gif
  • Resources/Title.html
    .html
  • Resources/xgate-icons-32.png
    .png
  • Scribe.exe
    .exe windows:5 windows x86 arch:x86

    3202647ee611434167953efdec0bed95


    Headers

    Imports

    Exports

    Sections

  • ScribeMapi.dll
    .dll windows:5 windows x86 arch:x86

    00bac7caf8dc29ad91a0132e1e8c5ec1


    Headers

    Imports

    Exports

    Sections

  • Scripts/Add Senders To Contacts.script
  • Scripts/Api.html
    .html
  • Scripts/Delete Attachments.script
  • Scripts/Delete Duplicate Messages.script
  • Scripts/Dom.txt
  • Scripts/Mail Filters Menu.script
  • Scripts/resdefs.h
  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    bf8e7031dd4d872b0842601addd0b97d


    Headers

    Imports

    Sections

  • aspell-dist-0.60.dll
    .dll windows:5 windows x86 arch:x86

    cb2ab8faaa789f26c4f187e91da7ed22


    Headers

    Imports

    Exports

    Sections

  • libntlm9.dll
    .dll windows:5 windows x86 arch:x86

    e12f6485c209bf313515c3fa26a17be5


    Headers

    Imports

    Exports

    Sections

  • libpng9x32.dll
    .dll windows:5 windows x86 arch:x86

    d7844c8d718652a8074d6d94890791df


    Headers

    Imports

    Exports

    Sections

  • zlib9x32.dll
    .dll windows:5 windows x86 arch:x86

    f589f8e9c7fcbc0482c55324795405d4


    Headers

    Imports

    Exports

    Sections