General

  • Target

    ab4c0e0d12449eaaf385651387197021_JaffaCakes118

  • Size

    13.6MB

  • MD5

    ab4c0e0d12449eaaf385651387197021

  • SHA1

    1efd0f0eb563f2078d44051218680fc61d5e6d76

  • SHA256

    78d9de7ffa9ac1382a421e4896ba4d7d0b760bc8327c434d04c4128f700e6478

  • SHA512

    bd40d5e91199dbce644998f25de6cf4d60d56cc139b34d490d77a767cdf6824131731124b57075ad837240bada3c96b0fe8c9d4dd083a5b543ef71468dff93d8

  • SSDEEP

    393216:aruzl6thGI8xDoqOmq4eaM14HwhFW8knYo0:ar46tj82mqCMdhFW8kYt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • ab4c0e0d12449eaaf385651387197021_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • 2f3e6242-13ec-4248-93d3-2f498fae5202.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Brazilian.xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Danish.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Dutch.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/English.xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Finnish.xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/French.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/German.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Italian.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Japanese.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Norwegian.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Russian.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Spanish.xml
    .xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Swedish.xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/TradChinese.xml
  • $APPDATA/SimpleStar/Simple Driver Updater/Language/Turkish.xml
    .xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    d3b0357e5a9df93304cb6f852ecac3b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsSessionSIDW.dll
    .dll windows:5 windows x86 arch:x86

    b3031de3a4e382143eb2236474719dea


    Headers

    Imports

    Exports

    Sections

  • SimpleDriverUpdater.exe
    .exe windows:5 windows x64 arch:x64

    be4ca90cd8e58d1e283e630df6197425


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SimpleDriverUpdater.mab
  • SimpleDriverUpdaterUpdater.exe
    .exe windows:5 windows x64 arch:x64

    00fff98e7e291c5bdaf7e6fb126706f0


    Code Sign

    Headers

    Imports

    Sections

  • SimpleDriverUpdaterUpdater.mab
  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsEnvVariables.dll
    .dll windows:5 windows x86 arch:x86

    211e16547fae1d5f51bf909bfc524385


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    02dceff3de5d2175177a78f2eb554a86


    Headers

    Imports

    Exports

    Sections