General

  • Target

    0860287445de58569923bee93cc01758_JaffaCakes118

  • Size

    3.6MB

  • MD5

    0860287445de58569923bee93cc01758

  • SHA1

    022505ff6a2cdf60ee34c6b76f32d57cb7dcda43

  • SHA256

    314e7335c97f90ea32c8a04c3490587947bbe549338f96ba7e210e7f45527437

  • SHA512

    4303a27331593d28cb005dc02fb61a70ff0001f237bbf2a9addf97de8cef4f7c65385cda0fdfc1ba4f3b733c155dae92bfbd07bc1bd4ab4e8e048c3cbfba222f

  • SSDEEP

    49152:n6ASK3cfSW2oHt1JfmXKRUm2LMZ5Cge9387O5QH47f6oxhaC2SvTKb/JsBVXS97S:d2d2oN/6m2O5Tey7O36ox7vWb/OvCfY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 0860287445de58569923bee93cc01758_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CheckInstall.exe
    .exe windows:5 windows x86 arch:x86

    1e06b1e51c07b4f145d681ea3c56d9b6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AutoShutdown.exe
    .exe windows:5 windows x86 arch:x86

    8f6ab9ff71d108d0e3816839ecec811b


    Headers

    Imports

    Sections

  • ClonedFileCleaner.exe
    .exe windows:5 windows x86 arch:x86

    68e7fb65f33a2170ff7a847adb260cef


    Headers

    Imports

    Sections

  • FilePulverizer.exe
    .exe windows:5 windows x86 arch:x86

    534a01922bcaf1cfc0ccede17be13f25


    Headers

    Imports

    Sections

  • StartupManager.exe
    .exe windows:5 windows x86 arch:x86

    43571c92784d74a1beab6ff2eeb57dbc


    Headers

    Imports

    Sections

  • SweepHelper.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SystemInformation.exe
    .exe windows:5 windows x86 arch:x86

    3e1894e298aa282e9eb9e8668bc36691


    Headers

    Imports

    Sections

  • SystemSpeedBooster.exe
    .exe windows:5 windows x86 arch:x86

    4d3e6dc8104daa9dcdba98c9782a5279


    Code Sign

    Headers

    Imports

    Sections

  • const.dat
  • data/topic.db
  • data/utilities.db
  • lang/English.lan
  • res/16.png
    .png
  • res/32.png
    .png
  • res/btnpanel.dat
  • res/icon.ico
  • res/images/about.png
    .png
  • res/images/background.png
    .png
  • res/info.html
    .html
  • res/trialnotify.mht
    .eml
  • attachment-2
    .gif
  • email-html-1.txt
  • skins/default.skn
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp