General

  • Target

    0f562ef0200664bc779e2e2569337a14_JaffaCakes118

  • Size

    542KB

  • MD5

    0f562ef0200664bc779e2e2569337a14

  • SHA1

    b545b0ff555c09326d27adbd3cf8e5964e230baf

  • SHA256

    b860f598a2550bb42b2aa77aed81e106cd36c50975a71b8288871ae61482e7a0

  • SHA512

    17c357bc7c54a09806dcbb1903e9c61bcd2a13ebd6e56901054b7db2d462e951e8dee35aad04aa2366f78402edd09fe7d5465d4b6ff64d1f4f1444334d736a75

  • SSDEEP

    12288:wI5AA6NtlKQOeJVU9E3wleUeRYm8sz+OQK4JQ8uhWsSL:HApTOeTU9E3wsUeFznQJhue

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0f562ef0200664bc779e2e2569337a14_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $APPDATA/Æô¶¯ Internet Explorer ä¯ÀÀÆ÷.lnk
    .lnk
  • $APPDATA/ÏÔʾ×ÀÃæ.scf
  • $FAVORITES/GoogleËÑË÷.url
  • $FAVORITES/°Ù¶ÈËÑË÷.url
    .url
  • $FAVORITES/ÍêÃÀϵͳÏÂÔØ.url
  • $FAVORITES/ÍøÖ·µ¼º½.url
  • $TEMP/A±äËÙÆ÷/DIGERATI.nfo
  • $TEMP/A±äËÙÆ÷/JSHJ.dll
    .dll windows:4 windows x86 arch:x86

    8b9a2b8058f778a74492dd95597461fd


    Headers

    Imports

    Exports

    Sections

  • $TEMP/A±äËÙÆ÷/WinIo.dll
    .dll windows:4 windows x86 arch:x86

    b9b2bee901bb36181f387e1e336faa1f


    Headers

    Imports

    Exports

    Sections

  • $TEMP/A±äËÙÆ÷/WinIo.sys
    .sys windows:4 windows x86 arch:x86

    172b54da983eaa27abf08d8ed525b840


    Headers

    Imports

    Sections

  • $TEMP/A±äËÙÆ÷/WinIo.vxd
  • $TEMP/A±äËÙÆ÷/aspeeder.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/A±äËÙÆ÷/keygen.nfo
  • $TEMP/A±äËÙÆ÷/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    ec9fe2df073f9adb523d740ca14e7bb5


    Headers

    Imports

    Sections

  • C:/Documents and Settings/Default User/Application Data/Microsoft/Internet Explorer/Desktop.htt
  • C:/Documents and Settings/Default User/Application Data/Microsoft/Internet Explorer/Quick Launch/Æô¶¯ Internet Explorer ä¯ÀÀÆ÷.lnk
    .lnk
  • C:/Documents and Settings/Default User/Application Data/Microsoft/Internet Explorer/Quick Launch/ÏÔʾ×ÀÃæ.scf
  • C:/Documents and Settings/Default User/Favorites/GoogleËÑË÷.url
  • C:/Documents and Settings/Default User/Favorites/°Ù¶ÈËÑË÷.url
    .url
  • C:/Documents and Settings/Default User/Favorites/ÍêÃÀϵͳÏÂÔØ.url
  • C:/Documents and Settings/Default User/Favorites/ÍøÖ·µ¼º½.url