General

  • Target

    0d6aa40d216594905d19c2ffef20507a_JaffaCakes118

  • Size

    410KB

  • MD5

    0d6aa40d216594905d19c2ffef20507a

  • SHA1

    b9967dcfa729046d3228e7f786f3106e52510087

  • SHA256

    c65d2fb033a375382c1e59d6c76eb24c047518012857db51e03800e3ad36559d

  • SHA512

    3d85f36807a00b8d79b43ffa5240dc89449672a736f7dbeb9647060e5a96ee06d107cd5cd39d7cad80be0f37887bfa06c4ea359ce3b14962f08971a43d5046ec

  • SSDEEP

    12288:El8/g7zYYpZRXQZ++9hfSZn84CwP/1Kyph:w8/wzRf+9hfGvz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 0d6aa40d216594905d19c2ffef20507a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    61142a69a9a888c92fddc2ab9dbb123a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • Langs.ini
  • PSU.EXE
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $EXEDIR/Langs.ini
  • $EXEDIR/PSU.ini
  • $EXEDIR/opt.dll
  • $PLUGINSDIR/Langs.ini
  • PSU.ini
  • UnRAR.exe
    .exe windows:4 windows x86 arch:x86

    6ead8cdd324aa83b32b7037bd7925408


    Headers

    Imports

    Exports

    Sections

  • bnn.dll
    .dll windows:4 windows x86 arch:x86

    8afccf04e4c0d9257a4d7f9fca4db1ad


    Headers

    Imports

    Exports

    Sections

  • ei.dll
    .dll windows:4 windows x86 arch:x86

    152b9779d6af71907194707c66bd88ee


    Headers

    Imports

    Exports

    Sections

  • exec.dll
    .dll windows:4 windows x86 arch:x86

    053c8c5da7b5f6a2513024b82859e1b0


    Headers

    Imports

    Exports

    Sections

  • get.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • ioe.dll
    .dll windows:4 windows x86 arch:x86

    dff47b9e6cea482397756125aba98eb3


    Headers

    Imports

    Exports

    Sections

  • ni.dll
    .dll windows:4 windows x86 arch:x86

    e043e246d8abcbb9de2ad82c6e18cd88


    Headers

    Imports

    Exports

    Sections

  • opt.dll
  • sda.dll
    .dll windows:4 windows x86 arch:x86

    e02f5133b7e45d844941aaceef0cff82


    Headers

    Imports

    Exports

    Sections

  • search.dll
    .dll windows:4 windows x86 arch:x86

    61142a69a9a888c92fddc2ab9dbb123a


    Headers

    Imports

    Exports

    Sections

  • time.dll
    .dll windows:4 windows x86 arch:x86

    2e3a4d1f132aea64d421c1e936bcc407


    Headers

    Imports

    Exports

    Sections

  • zip.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections