Overview

overview

7

Static

static

3

164daf1cd2...18.exe

windows7-x64

7

164daf1cd2...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

1

$PLUGINSDI...sh.dll

windows10-2004-x64

1

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

bin/amxArgs.dll

windows7-x64

3

bin/amxArgs.dll

windows10-2004-x64

3

bin/amxDGram.dll

windows7-x64

3

bin/amxDGram.dll

windows10-2004-x64

3

bin/amxFile.dll

windows7-x64

3

bin/amxFile.dll

windows10-2004-x64

3

bin/amxFixed.dll

windows7-x64

3

bin/amxFixed.dll

windows10-2004-x64

3

bin/amxFloat.dll

windows7-x64

3

bin/amxFloat.dll

windows10-2004-x64

3

bin/amxProcess.dll

windows7-x64

3

bin/amxProcess.dll

windows10-2004-x64

3

bin/amxString.dll

windows7-x64

3

bin/amxString.dll

windows10-2004-x64

3

bin/amxTime.dll

windows7-x64

3

bin/amxTime.dll

windows10-2004-x64

3

bin/callout.dll

windows7-x64

1

bin/callout.dll

windows10-2004-x64

1

bin/grep.exe

windows7-x64

1

bin/grep.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    164daf1cd22303f0a19a5800516b1802_JaffaCakes118

  • Size

    4.3MB

  • MD5

    164daf1cd22303f0a19a5800516b1802

  • SHA1

    4a51f16ff94d5ce8e6c96d5ba8fb942adc35e7db

  • SHA256

    dcf2984db975ae1a5826baf24c640af55376018031cd86a5b5e46984dea60632

  • SHA512

    db65d8eb67037cc184d8e07ec2656e4508b3209dff2f890df96aee4ddf8260b3eada75201ad1d65781ca62094075b6d80c8485ac764ddf07f4b5a42bbf9f02b2

  • SSDEEP

    98304:+W7qeaGInBOicgTXq8t+cYCrIbFKHkDft6QeVp2wSMfEkd/:+W7qnIicQaEoUIbCw9gcM8A/

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 164daf1cd22303f0a19a5800516b1802_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    eee37c14e102da3f62385f9796c701ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pawnsplash.gif
    .gif
  • LICENSE
  • NOTICE
  • bin/ANDANTE.FON
  • bin/amxArgs.dll
    .dll windows:1 windows x86 arch:x86

    81b7e969a8dd5bd2b6789e9317fe2ab5


    Headers

    Imports

    Exports

    Sections

  • bin/amxDGram.dll
    .dll windows:1 windows x86 arch:x86

    724b2c52cf0310ee0f73314cc28fc57c


    Headers

    Imports

    Exports

    Sections

  • bin/amxFile.dll
    .dll windows:1 windows x86 arch:x86

    68dc2d465349c106527b275121ae6eb2


    Headers

    Imports

    Exports

    Sections

  • bin/amxFixed.dll
    .dll windows:1 windows x86 arch:x86

    81b7e969a8dd5bd2b6789e9317fe2ab5


    Headers

    Imports

    Exports

    Sections

  • bin/amxFloat.dll
    .dll windows:1 windows x86 arch:x86

    35945a56af148f578386b5580e47ac2b


    Headers

    Imports

    Exports

    Sections

  • bin/amxProcess.dll
    .dll windows:1 windows x86 arch:x86

    e01c0674b780249135dd3691e1df56c9


    Headers

    Imports

    Exports

    Sections

  • bin/amxString.dll
    .dll windows:1 windows x86 arch:x86

    16945513c2f9cb23209b29c4bddbc11d


    Headers

    Imports

    Exports

    Sections

  • bin/amxTime.dll
    .dll windows:1 windows x86 arch:x86

    b78dc9c81e79ce1e1b544a7f306b613a


    Headers

    Imports

    Exports

    Sections

  • bin/callout.dll
    .dll windows:1 windows x86 arch:x86

    1403ae456a048189a53f210028c6c174


    Headers

    Imports

    Exports

    Sections

  • bin/grep.exe
    .exe windows:1 windows x86 arch:x86

    9a3fed7b271fbf14b1ee6c2eac44227c


    Headers

    Imports

    Sections

  • bin/grep.txt
  • bin/pawn.ico
  • bin/pawncc.exe
    .exe windows:1 windows x86 arch:x86

    39a1bc28b27c984074955359ac30fb34


    Headers

    Imports

    Exports

    Sections

  • bin/pawndbg.exe
    .exe windows:1 windows x86 arch:x86

    128cb67f444af95fd4285b5d88106c0a


    Headers

    Imports

    Exports

    Sections

  • bin/pawndbgc.exe
    .exe windows:1 windows x86 arch:x86

    e94d944268058a65368562f6478a2262


    Headers

    Imports

    Exports

    Sections

  • bin/pawnrun.exe
    .exe windows:1 windows x86 arch:x86

    dbe9b78239a42ae8f03fdb81b6119320


    Headers

    Imports

    Exports

    Sections

  • bin/quincy.exe
    .exe windows:5 windows x86 arch:x86

    952cd6aac26e05248c8ff05fa30ec8de


    Headers

    Imports

    Sections

  • doc/Arguments_Support.aux
  • doc/Arguments_Support.pdf
    .pdf

    • http://.The.inc

    • http://compuphase.com

    • http://lesamxargs.candargs.inc

    • http://whichisavailablefromthesitewww.compuphase.com

    • http://www.compuphase.com

  • doc/File_IO_Support.aux
  • doc/File_IO_Support.pdf
    .pdf

    • http://.The.inc

    • http://compuphase.com

    • http://lesamxfile.candfile.inc

    • http://optionallyincludingafullpath.target

    • http://www.cl.cam.ac.uk/mgk25.

    • http://www.compuphase.com

    • http://www.unicode.org

  • doc/Fixed_Point_Support.aux
  • doc/Fixed_Point_Support.pdf
    .pdf

    • http://.The.inc

    • http://atwww2.hursley.ibm.com/decimal/decifaq1.html.ThesourcecodeinCthatdemonstratesthelimitedprecisionofIEEE754

    • http://availableonwww.lahey.com

    • http://compuphase.com

    • http://lesfixed.candfixed.inc

    • http://www.compuphase.com

  • doc/Floating_Point_Support.aux
  • doc/Floating_Point_Support.pdf
    .pdf

    • http://.The.inc

    • http://availableonwww.lahey.com

    • http://compuphase.com

    • http://lesfloat.candfloat.inc

    • http://www.compuphase.com

  • doc/Network_Datagram_Exchange.aux
  • doc/Network_Datagram_Exchange.pdf
    .pdf

    • http://.The.inc

    • http://compuphase.com

    • http://lesamxdgram.canddatagram.inc

    • http://www.compuphase.com

  • doc/Pawn_Getting_Started.pdf
    .pdf

    • http://compuphase.com

    • http://www.compuphase.com

  • doc/Pawn_Implementer_Guide.pdf
    .pdf

    • http://afterexecutingevery100lines.int

    • http://amx.data

    • http://amxTheabstractmachine.name

    • http://amxTime.so

    • http://bstrtoarray.target

    • http://compuphase.com

    • http://creativecommons.org/licenses/by-sa/3.0/orsendalettertoCreativeCommons,171SecondSt,Suite300,SanFrancisco,CA94105USA.Belowisa

    • http://default.inc

    • http://e.g.default.inc

    • Show all
  • doc/Pawn_Language_Guide.aux
  • doc/Pawn_Language_Guide.pdf
    .pdf

    • http://compuphase.com

    • http://creativecommons.org/licenses/by-sa/2.5/orsendalettertoCreativeCommons,559NathanAbbottWay,Stanford,California94305,USA.Theinformationinthismanualandtheassociatedsoftwareareprovided

    • http://creativecommons.org/licenses/by-sa/3.0/orsendalettertoCreativeCommons,171SecondSt,Suite300,SanFran-cisco,CA94105USA.Belowisa

    • http://default.inc

    • http://leconsole.inc

    • http://lerpnparse.inc

    • http://rpnparse.inc/*mainrpnparserandlexicalanalysis,partoftheRPNcalculator*/#include

    • http://stack.inc/*stackfunctions,partoftheRPNcalculator*/#include

    • http://strtok.inc/*extractwordsfromastring

    • Show all
  • doc/Pawn_Porting_Guide.pdf
    .pdf
  • doc/Pawn_Remote_Debugging_Guide.pdf
    .pdf
  • doc/Process_and_library_control.aux
  • doc/Process_and_library_control.pdf
    .pdf
  • doc/Quincy_User_Guide.aux
  • doc/Quincy_User_Guide.pdf
    .pdf
  • doc/String_Manipulation.aux
  • doc/String_Manipulation.pdf
    .pdf
  • doc/Time_Functions.aux
  • doc/Time_Functions.pdf
    .pdf
  • doc/infotips.lst
  • examples/argument.p
  • examples/c2f.p
  • examples/capt.p
  • examples/cards.p
  • examples/chat.p
  • examples/comment.p
  • examples/faculty.p
  • examples/fib.p
  • examples/gcd.p
  • examples/gtkcalc.p
  • examples/hanoi.p
  • examples/hello.p
  • examples/hello2.p
  • examples/julian.p
  • examples/ones.p
  • examples/queue.p
  • examples/quincy/Getting started.tut
  • examples/quincy/Interfacing with networks or processes.tut
  • examples/quincy/Reverse-Polish Notation calulator.tut
  • examples/quincy/States and automatons.tut
  • examples/quincy/a peer-to-peer chat program.tut
  • examples/quincy/an interactive comment parser.tut
  • examples/quincy/calculating the day of the week.tut
  • examples/quincy/celsius to fahrenheit.tut
  • examples/quincy/desktop calculator.tut
  • examples/quincy/faculty numbers.tut
  • examples/quincy/fibonacci numbers.tut
  • examples/quincy/greatest common divisor.tut
  • examples/quincy/hello world.tut
  • examples/quincy/improved pedestrian crossing lights.tut
  • examples/quincy/julian day numbers and dates.tut
  • examples/quincy/message queue.tut
  • examples/quincy/obfuscating text.tut
  • examples/quincy/pedestrian crossing lights.tut
  • examples/quincy/samples.toc
  • examples/quincy/sets (intersection, union).tut
  • examples/quincy/sieve of eratosthenes.tut
  • examples/quincy/the towers of hanoi.tut
  • examples/quincy/word count.tut
  • examples/quine.p
  • examples/randlist.p
  • examples/readfile.p
  • examples/rot13.p
  • examples/rpn.p
  • examples/rpnparse.inc
  • examples/set.p
  • examples/sieve.p
  • examples/stack.inc
  • examples/strtok.inc
  • examples/traffic.p
  • examples/traffic2.p
  • examples/turtle.p
  • examples/wcount.p
  • examples/weekday.p
  • history.txt
  • include/amxdll.inc
  • include/args.inc
  • include/console.inc
  • include/core.inc
  • include/datagram.inc
  • include/default.inc
  • include/file.inc
  • include/fixed.inc
  • include/float.inc
  • include/process.inc
  • include/rational.inc
  • include/string.inc
  • include/time.inc
  • include/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • readme.txt
  • source/CMakeLists.txt
  • source/LICENSE
  • source/NOTICE
  • source/amx/CMakeLists.txt
  • source/amx/amx.c
  • source/amx/amx.h
  • source/amx/amxDGram.def
  • source/amx/amxDGram.rc
  • source/amx/amxFile.rc
  • source/amx/amxFixed.def
  • source/amx/amxFixed.rc
  • source/amx/amxFloat.def
  • source/amx/amxFloat.rc
  • source/amx/amxProcess.def
  • source/amx/amxProcess.rc
  • source/amx/amxargs.c
  • source/amx/amxargs.rc
  • source/amx/amxaux.c
  • source/amx/amxaux.h
  • source/amx/amxcons.c
  • source/amx/amxcons.h
  • source/amx/amxcore.c
  • source/amx/amxdbg.c
  • source/amx/amxdbg.h
  • source/amx/amxdef.asm
  • source/amx/amxdefn.asm
  • source/amx/amxdgram.c
  • source/amx/amxexec.asm
  • source/amx/amxexec_arm7.s
  • source/amx/amxexec_arm7_gas.s
  • source/amx/amxexec_gcc.c
  • source/amx/amxexec_thumb2.s
  • source/amx/amxexec_thumb2_gas.s
  • source/amx/amxexecn.asm
  • source/amx/amxfile.c
  • source/amx/amxfile.def
  • source/amx/amxgc.c
  • source/amx/amxgc.h
  • source/amx/amxjitr.asm
  • source/amx/amxjits.asm
  • source/amx/amxjitsn.asm
  • source/amx/amxpool.c
  • source/amx/amxpool.h
  • source/amx/amxprocess.c
  • source/amx/amxstring.c
  • source/amx/amxstring.def
  • source/amx/amxstring.rc
  • source/amx/amxtime.c
  • source/amx/amxtime.def
  • source/amx/amxtime.rc
  • source/amx/dllmain.c
  • source/amx/examples/logfile.cpp
  • source/amx/examples/power.c
  • source/amx/examples/prun1.c
  • source/amx/examples/prun2.c
  • source/amx/examples/prun3.c
  • source/amx/examples/prun4.c
  • source/amx/examples/prun5.c
  • source/amx/examples/prun_jit.c
  • source/amx/examples/readme.txt
  • source/amx/fixed.c
  • source/amx/float.c
  • source/amx/fpattern.c
  • source/amx/fpattern.h
  • source/amx/keeloq.c
  • source/amx/keeloq.h
  • source/amx/minGlue.h
  • source/amx/minIni.c
  • source/amx/minIni.h
  • source/amx/obj/amxexecc.obj
  • source/amx/obj/amxexecs.obj
  • source/amx/obj/amxjitr.obj
  • source/amx/obj/amxjits.obj
  • source/amx/osdefs.h
  • source/amx/pawndbg.c
    .vbs
  • source/amx/pawnrun.c
  • source/amx/term_ga.c
  • source/amx/term_ga.h
  • source/amx/termwin.c
  • source/amx/termwin.h
  • source/amxdll/AMX16.DLL
  • source/amxdll/LICENSE
  • source/amxdll/amx16.def
  • source/amxdll/amx16.lib
  • source/amxdll/amx16.mak
  • source/amxdll/amx32.def
  • source/amxdll/amx32.dll
    .dll windows:1 windows x86 arch:x86

    769539300e974edb56c7ec497b598c69


    Headers

    Imports

    Exports

    Sections

  • source/amxdll/amx32.imp
  • source/amxdll/amx32.lbc
  • source/amxdll/amx32.mak
  • source/amxdll/amx32b.lib
  • source/amxdll/amx32m.exp
  • source/amxdll/amx32m.lib
  • source/amxdll/amx32w.lib
  • source/amxdll/amxdll.c
  • source/amxdll/amxdll.fed
  • source/amxdll/amxdll.rc
  • source/amxdll/balloon.c
  • source/amxdll/balloon.h
  • source/amxdll/library.txt
  • source/amxdll/prun-dll.c
  • source/amxdll/readme.txt
  • source/cmake_modules/FindDyncall.cmake
  • source/cmake_modules/FindwxW.cmake
  • source/compiler/CMakeLists.txt
  • source/compiler/libpawnc.c
  • source/compiler/libpawnc.def
  • source/compiler/libpawnc.def.borland
  • source/compiler/libpawnc.lbc
  • source/compiler/lstring.c
  • source/compiler/lstring.h
  • source/compiler/memfile.c
  • source/compiler/memfile.h
  • source/compiler/pawncc.c
  • source/compiler/pawncc.def
  • source/compiler/pawncc.def.borland
  • source/compiler/pawncc.rc
  • source/compiler/pawndisasm.c
  • source/compiler/sc.h
  • source/compiler/sc1.c
  • source/compiler/sc2.c
  • source/compiler/sc3.c
  • source/compiler/sc4.c
  • source/compiler/sc5.c
  • source/compiler/sc5.scp
  • source/compiler/sc6.c
  • source/compiler/sc7.c
    .js
  • source/compiler/sc7.scp
  • source/compiler/scexpand.c
  • source/compiler/sci18n.c
  • source/compiler/sclist.c
  • source/compiler/scmemfil.c
  • source/compiler/scpack.c
  • source/compiler/scstate.c
  • source/compiler/scstub.c
  • source/compiler/scvars.c
  • source/compiler/svnrev.h
  • source/linux/binreloc.c
  • source/linux/binreloc.h
  • source/linux/getch.c
  • source/linux/getch.h
  • source/linux/sclinux.h
  • source/readme.txt
  • xml/pawndoc.css
  • xml/pawndoc.xsl
    .xml