General

  • Target

    18494ab13dd97077303373c56d87a682_JaffaCakes118

  • Size

    3.9MB

  • MD5

    18494ab13dd97077303373c56d87a682

  • SHA1

    6df93d963e365fd4eacd3112a441b83bbf68b8f3

  • SHA256

    ae3d604166425ad2241693a63aede06e80c11ef19ae8de197572c9f343840e7a

  • SHA512

    79f167c70719ec371f66ed6a53439cfa8e6e9b734ced1caecf3d0b7d2a241a0d50b56f1f3e1b84ea372a1d32c8e9b1275c8a344260ffc005235b3777a262adff

  • SSDEEP

    98304:08OjMbVgTq8B6HtJPezsZwT8AaDW4k313Y14t:083W+8B6HKQc8A/4I13Yet

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 18494ab13dd97077303373c56d87a682_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/refreshweb.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • PBACC115.DLL
    .dll windows:4 windows x86 arch:x86

    48769b3ac8557223e4933e5d91c5c711


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBDWE115.DLL
    .dll windows:4 windows x86 arch:x86

    7615764a96f6bb976bdb4565de80da1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBODB115.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    82caaf574774cf543628dad1b4605bb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBSHR115.DLL
    .dll windows:4 windows x86 arch:x86

    ddb9722f4fe0cde8e1062a61683530c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PBVM115.DLL
    .dll windows:4 windows x86 arch:x86

    81409f05df0d6641ec892d9bd063c125


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • cookies.bat
  • libjcc.dll
    .dll windows:4 windows x86 arch:x86

    1b0a346547e8b86414e28a4684240aa7


    Headers

    Imports

    Exports

    Sections

  • libjutils.dll
    .dll windows:4 windows x86 arch:x86

    33ee2cba20d82f3820335a0a2b65bb83


    Headers

    Imports

    Exports

    Sections

  • pbdpl115.DLL
    .dll windows:4 windows x86 arch:x86

    daebdb43eef6bb1de7740ebaefecc2d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pbodb115.ini
  • pbole110.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    abb988df25e6628bb84da6f3a05bc55a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • web.dat
  • web.exe
    .exe windows:4 windows x86 arch:x86

    1a3d8c3f39a0e02fe506a5bee2936643


    Headers

    Imports

    Sections

  • ¹¦ÄÜ˵Ã÷.txt