General

  • Target

    b748e68c3b132a964735e64fdcdab877_JaffaCakes118

  • Size

    3.0MB

  • MD5

    b748e68c3b132a964735e64fdcdab877

  • SHA1

    9e6e18b4368d91cbf60af4b7ab7ecb7b3d0354a5

  • SHA256

    76238af88d9a95bd3c17b150465d6dc8f0734d9b25670d8bd10d63559a55b615

  • SHA512

    9ddd0fd7ad0395af9147f4bec255aedb32fbfbeb9be5a9cf2952c30f9a39db46a96ea194d4166742fd942a076a1b014418b6a66c0d8ee2f1171128827fa6194b

  • SSDEEP

    49152:sTKVqrkZt9zHRK8wHGkNmL8MzYjNJSszKUqGDbc1oODEydI+YdYl8gt:sTKVqY/9zxXwHGQmL8LSUK/p7EydI3aT

Score
10/10

Malware Config

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b748e68c3b132a964735e64fdcdab877_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:5 windows x86 arch:x86

    eaa5f91829171a65db414b9e64ec9548


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DMCustomControls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DMSharedClasses.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DMStartupWizard.XmlSerializers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DMStartupWizard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DMUpdater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DataMaster Launcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DataMaster MAARMLS.XmlSerializers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DataMaster MAARMLS.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DataMaster MAARMLS.exe.config
  • DataMasterAssociater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DataMasterDDE.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DataMasterPlus.XmlSerializers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DataMasterPlus.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DataMasterRestarter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Interop.DataMasterEServiceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MDS.AppraisalForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MDS.Vendors.XmlSerializers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MDS.Vendors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Mapdefinition.datamasterusa
  • NDde.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RapidReadWrite32.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ReportViewControls.XmlSerializers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ReportViewControls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Windows.Forms.DataVisualization.Design.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Windows.Forms.DataVisualization.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Uninstall DataMaster MAAR MLS.exe.nsis
  • librets-dotnet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • librets-pinvoke.dll
    .dll windows:5 windows x86 arch:x86

    13ab2c1c2dee8f819217b0f9ae3ab09d


    Headers

    Imports

    Exports

    Sections