General

  • Target

    193f23fe2c74ede3b539bb09f6710318_JaffaCakes118

  • Size

    616KB

  • MD5

    193f23fe2c74ede3b539bb09f6710318

  • SHA1

    4556f9fa7f0720bf89484949a9e53f9b97e2211e

  • SHA256

    12922352d5853ea734c6e99edc210f348c1a1b41bd9b63a21ddb75b5327eb031

  • SHA512

    7ddf5ed5229a9ee0acbe791878ba6b1f705788a7767dae78d38cf6e9e2561d2ebe2905396776319378a81b41f974bffa7d59237fbd9d05c9fbe34642373f2f82

  • SSDEEP

    6144:3e34xaRKBccrOZp/80docN+yYrga713qI/3t45a109gyZqXrBBUFH2PKCo7Z295A:jaRKycrOoqrSMUC9gVXlB2SGA/JphVe3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 193f23fe2c74ede3b539bb09f6710318_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    780d5144b51ed81eb7a613fe530447d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • EADKManager.exe
    .exe windows:5 windows x86 arch:x86

    22c5733372ef743032799dcd5b6c43d2


    Headers

    Imports

    Sections

  • EAExchDomainKeys.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    43e6c5b989e6ad437a87f2d3d04bfa3e


    Headers

    Imports

    Exports

    Sections

  • EAExchDomainKeys2007.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Interop.EAExchDomainKeysLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • eaexchdomainkeys.chm
    .chm
  • installer/eadkinstaller.vbs
    .vbs
  • installer/smtpregex.vbs
    .vbs
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • x64/EAExchDomainKeys.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    20adbd68eaf81b9000d6c22ed4d40741


    Headers

    Imports

    Exports

    Sections