General

  • Target

    0905d3da4ad7ee851b3fa8236a31c005_JaffaCakes118

  • Size

    5.9MB

  • MD5

    0905d3da4ad7ee851b3fa8236a31c005

  • SHA1

    832352ad8ea05ab085b191ed6b1d4bcf5daa694d

  • SHA256

    cf33332f4c00f4466c680b3d534dc8f48b1f373d140746079504bdd94e859501

  • SHA512

    3b13b39f878c4f730ea98b5bedf3a44242ecd2925557edf268d985ce1c393a08919d798488251d95867b8922a0ab1dfc3d41ef7d40682f2c41a519fa1d8c347c

  • SSDEEP

    98304:/IPYwbdNzv6YGbX3MOI3BGDpDznP32QJeEfyeOcEltu4HvmaHK6EQDXsF7gGv+9w:SvvTGbXRIxWpmQJeEfyhLtu4Hvm/6JDA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 0905d3da4ad7ee851b3fa8236a31c005_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioA.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/makerd.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • AdvRegDoc.chm
    .chm
  • AdvRegDocPro.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • AdvRegDoc_1709.sdb
  • Advanced Registry Doctor Home Page.url
  • Data/data001.reg
  • Data/data003.reg
  • Data/data006.reg
  • Data/data007.reg
  • Data/data009.reg
  • Data/data011.reg
  • Data/data013.reg
  • Data/data016.reg
  • Data/data017.reg
  • Data/data020.reg
  • Data/data023.reg
  • Data/data027.reg
  • Data/data030.reg
  • Data/data031.reg
  • Data/data033.reg
  • Data/data040.reg
  • Data/data042.reg
  • DefragMap.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Elcor Software Home Page.url
  • GAdvRegDoc.chm
    .chm
  • GRegDefrag.chm
    .chm
  • LangMan.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Language/Arabic.ini
  • Language/Arabic_ard.ini
  • Language/Bulgarian.ini
  • Language/Bulgarian_ard.ini
  • Language/Dutch.ini
  • Language/Dutch_ard.ini
  • Language/English.ini
  • Language/English_ard.ini
  • Language/Finnish.ini
  • Language/French.ini
  • Language/French_ard.ini
  • Language/French_old.ini
  • Language/Galician.ini
  • Language/German.ini
  • Language/German_ard.ini
  • Language/Italian.ini
  • Language/Italian_ard.ini
  • Language/Korean.ini
  • Language/Korean_ard.ini
  • Language/Lithuanian.ini
  • Language/Polish.ini
  • Language/Polish_ard.ini
  • Language/Portuguese.ini
  • Language/Portuguese_ard.ini
  • Language/Russian.ini
  • Language/Russian_ard.ini
  • Language/SChinese_ard.ini
  • Language/SChinese_ard.ini_
  • Language/Simplified_Chinese.ini
  • Language/Spanish.ini
  • Language/Spanish_.ini
  • Language/Spanish_ard.ini
  • Language/TChinese _ard.ini
  • Language/Traditional_Chinese.ini
  • Language/Ukrainian.ini
  • PDB/StartupList.pdb
  • Press Release (RegDefrag).txt
  • Press Release German.rtf
    .rtf
  • Press Release RU (RegDefrag).txt
  • Press Release RU.txt
  • Press Release.txt
  • ReadMe.txt
  • RegBackup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RegDefrag.chm
    .chm
  • RegDefrag.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RegDefragRus.chm
    .chm
  • RegDefrag_1609.sdb
  • RegDfrgSch.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RegDfrgSch.tsk
  • RegToolkit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SysBackup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • language.cfg
  • tutor1.gif
    .gif
  • tutor2.gif
    .gif
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • x64.config