General

  • Target

    23f460a4b69297483a66f6c53a38975d_JaffaCakes118

  • Size

    8.2MB

  • MD5

    23f460a4b69297483a66f6c53a38975d

  • SHA1

    6ed4478ebeea057817e94ce720defeb9035fbafa

  • SHA256

    5fbec177cc0a09605ed2074cefdad931515c9510a7802ba66cda4b090f6e877a

  • SHA512

    48db65e4f88efb2695736daced961c7a543838239d847d48b4ccdcea0a45972654893d9c2a39d19cb2175eea6c96f488b6f6abeaa41d20709a4a9e867a0a638d

  • SSDEEP

    196608:EC3g1d643bs/1LZCwsQZ5rfbFXc77YikaNtW:ECgA43bs/PCwsQDfZXNaNM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 23f460a4b69297483a66f6c53a38975d_JaffaCakes118
    .rar
  • ewidoantispyware400172a.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    4f442ed10b44738ac5be186be50eb28e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Signatures/1.dat
  • Translations/czech.mo
  • Translations/english.mo
  • Translations/german.mo
  • clsid.dat
  • context.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    55350160c8448e5c67fef2f438312289


    Headers

    Imports

    Exports

    Sections

  • engine.dll
    .dll windows:4 windows x86 arch:x86

    edcd73c2f5da6f71f3b6c3ebb5926831


    Headers

    Imports

    Exports

    Sections

  • ewido.exe
    .exe windows:4 windows x86 arch:x86

    47ec8801c81a57e0a0bb7c3e39029e24


    Headers

    Imports

    Sections

  • guard.exe
    .exe windows:4 windows x86 arch:x86

    10529858f76a86572d125531d851bdd2


    Headers

    Imports

    Sections

  • guard.sys
    .sys windows:5 windows x86 arch:x86

    c1cc8b03ee7cab8fd08f706a230b2b1e


    Headers

    Imports

    Sections

  • help.dll
  • heuristic.dat
  • shellexecutehook.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d357985a4ef975b80f6dccec06897893


    Headers

    Imports

    Exports

    Sections

  • ewidoantispyware400172ahhbd_kaci.exe
    .exe windows:4 windows x86 arch:x86

    9d552e70fef39e7e235206264bc1ad23


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 非常世纪资源网.url
    .url