General

  • Target

    ae5c046b50e89d5b350b08e9d29199f0_JaffaCakes118

  • Size

    8.8MB

  • MD5

    ae5c046b50e89d5b350b08e9d29199f0

  • SHA1

    38c8b1068bcf11f1198305f2b28ca9b9a6c93318

  • SHA256

    c13d17cfc77112b2fb95fb451286704bb232a04ff792038019b5c8c9a043a6b9

  • SHA512

    044b0a0849620a36a9c8235946331030598ace40a2e96b51a36a82806b1b5ed697d5dd0395b428a3889ec052837412a5bbaabda327d62e9acd78806737407062

  • SSDEEP

    196608:WBVoRLLMt6tPp+1OzsiJXKQAWaU5VYUjyODN5sviY:WBVaLLtPsgz3gzUNwiY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • ae5c046b50e89d5b350b08e9d29199f0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    fc01392fe93045b475f10ef1edeaf66c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:4 windows x86 arch:x86

    fb89301642ac2a39aefdd3cc2610ed81


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/image.jpg
    .jpg
  • $PLUGINSDIR/license.rtf
    .rtf
  • $PLUGINSDIR/nsis_gui.dll
    .dll windows:5 windows x86 arch:x86

    4a84122588554cfe2d86736fc1dc3940


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/yandex.jpg
    .png
  • $TEMP/downloader.exe
    .exe windows:5 windows x86 arch:x86

    a05d88650e5594db2afe874ec2674b55


    Code Sign

    Headers

    Imports

    Sections

  • AVSVC32.exe
    .exe windows:5 windows x86 arch:x86

    cafae747cd238c570a29ab80409d1761


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT.manifest
  • avitva.exe
    .exe windows:5 windows x86 arch:x86

    a388f4cde2a3ceddd3096ed32ea357cd


    Headers

    Imports

    Exports

    Sections

  • avitvapm32.sys
    .sys windows:6 windows x86 arch:x86

    862471d273a6aac7ffb4dc8630234d2e


    Code Sign

    Headers

    Imports

    Sections

  • freshclam.conf
  • freshclam.exe
    .exe windows:4 windows x86 arch:x86

    9f982ec570a649da60260954cd7f7389


    Headers

    Imports

    Sections

  • libclamav.dll
    .dll windows:4 windows x86 arch:x86

    4f75917f93c8d5d02bd210f31ab8319f


    Headers

    Imports

    Exports

    Sections

  • libclamav_llvm.dll
    .dll windows:4 windows x86 arch:x86

    03d8fc5f1ddd106636fb563d65f28f78


    Headers

    Imports

    Exports

    Sections

  • libclamunrar.dll
    .dll windows:4 windows x86 arch:x86

    7ba648c0e64d7bd538f22de4e6dd47ed


    Headers

    Imports

    Sections

  • libclamunrar_iface.dll
    .dll windows:4 windows x86 arch:x86

    617f9990454385cb2f9c6ea7739465cc


    Headers

    Imports

    Exports

    Sections

  • msvcm80.dll
    .dll windows:4 windows x64 arch:x64

    17e87bada52880587cc12a35bab5cc69


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x64 arch:x64

    8518d5765ff2216e24ba6753bf91456b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x64 arch:x64

    6c31ff1756690f37d3e2c95f96fa9b5a


    Code Sign

    Headers

    Imports

    Exports

    Sections