General

  • Target

    b0be29bcccbc18b29f43856553f34076_JaffaCakes118

  • Size

    25.3MB

  • MD5

    b0be29bcccbc18b29f43856553f34076

  • SHA1

    f4bbbc4ee08cace02cbc7fda073a8860a5ab1760

  • SHA256

    582f723c5bdac70067b3a531e4cbd8b45e1854ccd91655c7542a3bfa0281c48d

  • SHA512

    7fe7c9f5a1abf9ab7bffec8c11efd8878f4373c19a838aaf801f314a5aac502880d11e49f9a1a867c907599c5c03c654450b538b2ddadf381f92cc577c73b26a

  • SSDEEP

    786432:QxWHpYT67B40PJveY/WANVbqFCKZb3FWbbo7g:A8Gm7uSePecBZbV5g

Score
10/10

Malware Config

Signatures

  • Nirsoft 2 IoCs
  • Unsigned PE 60 IoCs

    Checks for missing Authenticode signature.

Files

  • b0be29bcccbc18b29f43856553f34076_JaffaCakes118
    .zip
  • PHacker 32 bit/ProcessHacker.exe
    .exe windows:5 windows x86 arch:x86

    04de0ad9c37eb7bd52043d2ecac958df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PHacker 32 bit/ProcessHacker.sig
  • PHacker 32 bit/kprocesshacker.sys
    .sys windows:6 windows x86 arch:x86

    f4bb5c922d37f0e22b46ddcb970a0a3a


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/peview.exe
    .exe windows:5 windows x86 arch:x86

    18b893d812345fefafd644b870f18c61


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/DotNetTools.dll
    .dll windows:5 windows x86 arch:x86

    e17ba1da8b79afe0943501b2878fa8aa


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/ExtendedNotifications.dll
    .dll windows:5 windows x86 arch:x86

    a38628b6f28117aef252a51755a56458


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/ExtendedServices.dll
    .dll windows:5 windows x86 arch:x86

    227df7ae8435d542b182ed859f1fc4eb


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/ExtendedTools.dll
    .dll windows:5 windows x86 arch:x86

    1f66a56d141224712ec7adb923bf37bc


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/HardwareDevices.dll
    .dll windows:5 windows x86 arch:x86

    df6ce4cfb0f22ad2fc0e01b732d88f54


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/NetworkTools.dll
    .dll windows:5 windows x86 arch:x86

    e32684bf82cc05bafae420aa4e52ec9a


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/OnlineChecks.dll
    .dll windows:5 windows x86 arch:x86

    7eb18c04e761984313671403452257bb


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/SbieSupport.dll
    .dll windows:5 windows x86 arch:x86

    ac5d7667a131f049a9c88e2f0ce087aa


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/ToolStatus.dll
    .dll windows:5 windows x86 arch:x86

    3f41780f59b78ef27ce4b4cde955e570


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/Updater.dll
    .dll windows:5 windows x86 arch:x86

    c87b61009338c7192fdd5855a4632125


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/UserNotes.dll
    .dll windows:5 windows x86 arch:x86

    c0fea95b42632918681f1e715a06203f


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 32 bit/plugins/WindowExplorer.dll
    .dll windows:5 windows x86 arch:x86

    7ebf3461dadb4d4949ccc1e2668eaf78


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/ProcessHacker.exe
    .exe windows:5 windows x64 arch:x64

    3695333c60dedecdcaff1590409aa462


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PHacker 64 bit/ProcessHacker.sig
  • PHacker 64 bit/kprocesshacker.sys
    .sys windows:6 windows x64 arch:x64

    3905de10e3379fd2be8de512a33433a3


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/peview.exe
    .exe windows:5 windows x64 arch:x64

    c79e8e2893e86218fc71412598f61209


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/DotNetTools.dll
    .dll windows:5 windows x64 arch:x64

    c3f8d8cddba6c99a5f0f2ab21f6f89f6


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/ExtendedNotifications.dll
    .dll windows:5 windows x64 arch:x64

    acd7837a0f8690fa4b5ada849f2560b0


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/ExtendedServices.dll
    .dll windows:5 windows x64 arch:x64

    8077acd95550e90db0afd6fb1689e912


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/ExtendedTools.dll
    .dll windows:5 windows x64 arch:x64

    9d757d0f8f00e9133c716e8e21d6b1b0


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/HardwareDevices.dll
    .dll windows:5 windows x64 arch:x64

    119abb51b3de6c8e65225ee81e503143


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/NetworkTools.dll
    .dll windows:5 windows x64 arch:x64

    708b686e80e093711f38091d787a01bd


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/OnlineChecks.dll
    .dll windows:5 windows x64 arch:x64

    04815c367f41620755869bb42bd07b00


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/SbieSupport.dll
    .dll windows:5 windows x64 arch:x64

    72ee8e9111090fd44c3cca631502d2bb


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/ToolStatus.dll
    .dll windows:5 windows x64 arch:x64

    eb997c25e2337a8dceb7fa463ce2b04d


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/Updater.dll
    .dll windows:5 windows x64 arch:x64

    a4de2eec6f8b6d96d60cfa61bcaa6840


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/UserNotes.dll
    .dll windows:5 windows x64 arch:x64

    dc18317fe7617feca1007aefae7060a6


    Code Sign

    Headers

    Imports

    Sections

  • PHacker 64 bit/plugins/WindowExplorer.dll
    .dll windows:5 windows x64 arch:x64

    807c2a5324cd8c3d21e70814ac733d28


    Code Sign

    Headers

    Imports

    Sections

  • USB/usbHistory.exe
    .exe windows:4 windows x86 arch:x86

    67c097438e1eeda7286e421b1c8772aa


    Headers

    Imports

    Sections

  • ��⨢���/LastActivityView.cfg
  • ��⨢���/LastActivityView.chm
    .chm
  • ��⨢���/LastActivityView.exe
    .exe windows:4 windows x86 arch:x86

    28d54068583ea348b007c0eb72f71f9c


    Code Sign

    Headers

    Imports

    Sections

  • ���㧥�/BrowsingHistoryView.cfg
  • ���㧥�/BrowsingHistoryView.chm
    .chm
  • ���㧥�/BrowsingHistoryView.exe
    .exe windows:4 windows x86 arch:x86

    f3c51d46b32c789380e17c5bf6bb3776


    Headers

    Imports

    Sections

  • �㢠/License.txt
  • �㢠/lang/lang-1025.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1026.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1027.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1028.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1029.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1030.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1031.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1032.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1034.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1035.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1036.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1037.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1038.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1040.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1041.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1043.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1044.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1045.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1046.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1048.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1049.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1050.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1051.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1052.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1053.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1054.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1055.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1057.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1058.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1059.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1060.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1061.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1062.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1063.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1066.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1067.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1068.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1071.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-1079.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-2052.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-2074.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-3098.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-5146.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/lang/lang-9999.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • �㢠/portable.dat
  • �㢠/recuva.exe
    .exe windows:5 windows x86 arch:x86

    ac50b187d8a38d4f1979564a90c4e82e


    Code Sign

    Headers

    Imports

    Sections

  • �㢠/recuva.ini
  • �㢠/recuva64.exe
    .exe windows:5 windows x64 arch:x64

    7e18b8b5a1ac812604c6a2df53eec6fd


    Code Sign

    Headers

    Imports

    Sections

  • ��⬠�/Hetman Partition Recovery.chm
    .chm
  • ��⬠�/Hetman Partition Recovery.exe
    .exe windows:5 windows x86 arch:x86

    763b43b57b0bcb05864f5c59fdc7b2f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ��⬠�/Language/Russian.lng
  • ��⬠�/Language/common/Russian.lng
  • ��⬠�/Resources/LoadRAW.dll
    .dll windows:4 windows x86 arch:x86

    308343f319894f4aa30ec1ea62e0045b


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/Resources/MagicPDF.dll
    .dll windows:5 windows x86 arch:x86

    cfffa640694082a03aeca64533a2322d


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/Resources/StarBurn.dll
    .dll windows:6 windows x86 arch:x86

    ea720829252e09062268736bb8fda232


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ��⬠�/Resources/magic_cmp.dll
    .dll windows:4 windows x86 arch:x86

    71fc45db7a81ce236f432a828a4e8fcd


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/Resources/magic_jbig.exe
    .exe windows:5 windows x86 arch:x86

    d12209f9fb21829c6b138e300a2e7cae


    Headers

    Imports

    Sections

  • ��⬠�/Resources/msvcr100d.dll
    .dll windows:5 windows x86 arch:x86

    0dc7b0e0b0a7b26ca080f7c56e8c0b34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ��⬠�/Resources/wp_type1ttf.dll
    .dll windows:5 windows x86 arch:x86

    c417bb79f3b1f3040f76d57a1e05d087


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/Settings.ini
  • ��⬠�/media_dll/SDL-2.dll
    .dll windows:4 windows x86 arch:x86

    d0e13975df147229287ce6fd6cea2383


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/SDL.dll
    .dll windows:4 windows x86 arch:x86

    d0e13975df147229287ce6fd6cea2383


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/avcodec-54.dll
    .dll windows:4 windows x86 arch:x86

    84b34a6f341f5339a02e4e387605288c


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/avdevice-54.dll
    .dll windows:4 windows x86 arch:x86

    baabff4017bc3b76ee85e20b87f6f770


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/avfilter-3.dll
    .dll windows:4 windows x86 arch:x86

    5e0f51cf695a4584ad702264e31dda80


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/avformat-54.dll
    .dll windows:4 windows x86 arch:x86

    9674a183aacb4148dfbf8db0e7e51830


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/avutil-52.dll
    .dll windows:4 windows x86 arch:x86

    e0df73c0f31393cc9d0c80ae058cb473


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/swresample-0.dll
    .dll windows:4 windows x86 arch:x86

    d8f91c2740a8964dfcb434832db800e5


    Headers

    Imports

    Exports

    Sections

  • ��⬠�/media_dll/swscale-2.dll
    .dll windows:4 windows x86 arch:x86

    bdd686222e4dc451f28b77a336761e78


    Headers

    Imports

    Exports

    Sections