General

  • Target

    0d6ff21d8a440c8dda8404027c0b651d_JaffaCakes118

  • Size

    523KB

  • MD5

    0d6ff21d8a440c8dda8404027c0b651d

  • SHA1

    d910ed847a5800ad2215238394cf5a3af2819a1f

  • SHA256

    d1d0c1cbfb14d926a9e0bfa9014ff01e52dd01f5564fd05c64085f6361cac6f2

  • SHA512

    daac1e9cdbc147bd7496cf34bd4a8836979b63b369a48cd18d562b4c5e8456dbd725da4dbef2a75d308aa74ecbddc945da56d1c26a5b016fb47ee1e4054c5297

  • SSDEEP

    12288:HTg70cVw0vcUgT1zsD3tDOCbeQRAym/dPPE:Hc4cVw0vmpzsbtTbH/Z

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0d6ff21d8a440c8dda8404027c0b651d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    591b87cc69e265e93588656a9fa8b4b5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    8fc31e88f4e2f35a7d6873d897a2680d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/RegBin.dll
    .dll windows:4 windows x86 arch:x86

    390ab075da868817d0c9b6587becbd00


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Validator.dll
    .dll windows:4 windows x86 arch:x86

    118d04b96a35553271cc3ad4732fe993


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ads.ini
  • $PLUGINSDIR/chooselang.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsisdl.dll
    .dll windows:4 windows x86 arch:x86

    b463961181e46bd27e129ca4231e6ad4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Build.ini
  • $_3_/StuffPlug-NG.dll
    .dll windows:4 windows x86 arch:x86

    a915d6fea955d16cd5e8942da3d2189b


    Headers

    Imports

    Exports

    Sections

  • Languages/DefaultLg.dat
  • Languages/Howto.txt
  • Languages/MsgPlusTrans.exe
    .exe windows:4 windows x86 arch:x86

    d30ec84da0e6c209b140f60147d40c2b


    Headers

    Imports

    Sections

  • Talkers/Howto.txt
  • Talkers/talker.alternating.vbs
    .vbs
  • Talkers/talker.bambi.js
    .js
  • Talkers/talker.bambidark.js
    .js
  • Talkers/talker.big.js
    .js
  • Talkers/talker.bin.js
    .js
  • Talkers/talker.booage.js
    .js
  • Talkers/talker.bork.js
    .js
  • Talkers/talker.bub.vbs
  • Talkers/talker.calc.js
  • Talkers/talker.cword.js
    .js
  • Talkers/talker.dashed.vbs
  • Talkers/talker.dotted.vbs
  • Talkers/talker.double.vbs
  • Talkers/talker.down.vbs
  • Talkers/talker.echo.vbs
  • Talkers/talker.emo.js
    .js
  • Talkers/talker.emot.js
  • Talkers/talker.french.js
  • Talkers/talker.fudd.js
    .js
  • Talkers/talker.halfrot.js
    .js
  • Talkers/talker.hex.js
    .js
  • Talkers/talker.java.js
    .js
  • Talkers/talker.lafrican.js
    .js
  • Talkers/talker.lame.js
    .js
  • Talkers/talker.matrix.js
    .js
  • Talkers/talker.md5.js
    .js
  • Talkers/talker.morse.js
  • Talkers/talker.nato.js
    .js
  • Talkers/talker.piglatin.js
  • Talkers/talker.pirate.vbs
  • Talkers/talker.piratejs.js
    .js
  • Talkers/talker.reverse.vbs
  • Talkers/talker.rot13.js
    .js
  • Talkers/talker.scramble.js
    .js
  • Talkers/talker.scramread.js
    .js
  • Talkers/talker.segosa.vbs
  • Talkers/talker.spaced.vbs
  • Talkers/talker.yoda.js
    .js
  • UI/Backup/autocompress.css
  • UI/Backup/autocompress.htm
    .html .js polyglot
  • UI/Backup/cedpstealer.css
  • UI/Backup/cedpstealer.htm
    .html .js polyglot
  • UI/Backup/deftabs.xml
    .xml
  • UI/Backup/error.css
  • UI/Backup/error.htm
    .html .js polyglot
  • UI/Backup/global.css
  • UI/Backup/global.js
    .js
  • UI/Backup/ignores.css
  • UI/Backup/ignores.htm
    .html .js polyglot
  • UI/Backup/images/buttondownleft.png
    .png
  • UI/Backup/images/buttondownmiddle.png
    .png
  • UI/Backup/images/buttondownright.png
    .png
  • UI/Backup/images/buttonhoverleft.png
    .png
  • UI/Backup/images/buttonhovermiddle.png
    .png
  • UI/Backup/images/buttonhoverright.png
    .png
  • UI/Backup/images/buttonleft.png
    .png
  • UI/Backup/images/buttonmiddle.png
    .png
  • UI/Backup/images/buttonright.png
    .png
  • UI/Backup/images/checkbox.png
    .png
  • UI/Backup/images/checkboxdown.png
    .png
  • UI/Backup/images/checkboxhover.png
    .png
  • UI/Backup/images/checkmark.png
    .png
  • UI/Backup/images/expand.png
    .png
  • UI/Backup/images/genericbackground.gif
    .gif
  • UI/Backup/images/iLogo.png
    .png
  • UI/Backup/images/options_bottomlogo.png
    .png
  • UI/Backup/images/optionsfooter.png
    .png
  • UI/Backup/images/optionsheader.png
    .png
  • UI/Backup/images/optionstabseperator.png
    .png
  • UI/Backup/images/resize_drag.png
    .png
  • UI/Backup/images/resizebackgrooldund.png
    .png
  • UI/Backup/images/resizebackground.png
    .png
  • UI/Backup/images/resizebar.png
    .png
  • UI/Backup/images/resizeheader.png
    .png
  • UI/Backup/images/resizepreview.png
    .png
  • UI/Backup/images/selected.png
    .png
  • UI/Backup/images/textboxbg.png
    .png
  • UI/Backup/listcleaner.css
  • UI/Backup/listcleaner.htm
    .html .js polyglot
  • UI/Backup/loadfailures.htm
    .html .js polyglot
  • UI/Backup/options.css
  • UI/Backup/options.htm
    .html .js polyglot
  • UI/Backup/resize.css
  • UI/Backup/resize.htm
    .html .js polyglot
  • UI/Backup/style.css
  • UI/Backup/switchlang.css
  • UI/Backup/switchlang.htm
    .html .js polyglot
  • UI/Backup/tabmanager.css
  • UI/Backup/tabmanager.htm
    .html .js polyglot
  • UI/Backup/unktalker.css
  • UI/Backup/unktalker.htm
    .html .js polyglot
  • UI/autocompress.css
  • UI/autocompress.htm
    .html .js polyglot
  • UI/cedpstealer.css
  • UI/cedpstealer.htm
    .html .js polyglot
  • UI/deftabs.xml
    .xml
  • UI/error.css
  • UI/error.htm
    .html .js polyglot
  • UI/global.css
  • UI/global.js
    .js
  • UI/ignores.css
  • UI/ignores.htm
    .html .js polyglot
  • UI/images/buttondownleft.png
    .png
  • UI/images/buttondownmiddle.png
    .png
  • UI/images/buttondownright.png
    .png
  • UI/images/buttonhoverleft.png
    .png
  • UI/images/buttonhovermiddle.png
    .png
  • UI/images/buttonhoverright.png
    .png
  • UI/images/buttonleft.png
    .png
  • UI/images/buttonmiddle.png
    .png
  • UI/images/buttonright.png
    .png
  • UI/images/checkbox.png
    .png
  • UI/images/checkboxdown.png
    .png
  • UI/images/checkboxhover.png
    .png
  • UI/images/checkmark.png
    .png
  • UI/images/expand.png
    .png
  • UI/images/genericbackground.gif
    .gif
  • UI/images/iLogo.png
    .png
  • UI/images/options_bottomlogo.png
    .png
  • UI/images/optionsfooter.png
    .png
  • UI/images/optionsheader.png
    .png
  • UI/images/optionstabseperator.png
    .png
  • UI/images/resize_drag.png
    .png
  • UI/images/resizebackground.png
    .png
  • UI/images/resizebackground_old.png
    .png
  • UI/images/resizebar.png
    .png
  • UI/images/resizeheader.png
    .png
  • UI/images/resizepreview.png
    .png
  • UI/images/selected.png
    .png
  • UI/images/textboxbg.png
    .png
  • UI/listcleaner.css
  • UI/listcleaner.htm
    .html .js polyglot
  • UI/loadfailures.htm
    .html .js polyglot
  • UI/options.css
  • UI/options.htm
    .html .js polyglot
  • UI/resize.css
  • UI/resize.htm
    .html .js polyglot
  • UI/style.css
  • UI/switchlang.css
  • UI/switchlang.htm
    .html .js polyglot
  • UI/tabmanager.css
  • UI/tabmanager.htm
    .html .js polyglot
  • UI/unktalker.css
  • UI/unktalker.htm
    .html .js polyglot
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    591b87cc69e265e93588656a9fa8b4b5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • sp.ico