General

  • Target

    2ba505ed01a533554e6f2f315364dd11_JaffaCakes118

  • Size

    492KB

  • MD5

    2ba505ed01a533554e6f2f315364dd11

  • SHA1

    812869a3a68c01045f3282a5a59171ed8cb25785

  • SHA256

    b3d9e8b1cd882e6f01cb787545ad2a5b5befe22496e5d212e224045720b91788

  • SHA512

    45732e7ec5ab21470c487a7a83978f93645865f8314cdef93cab11d200d6ab18039ce66ad868460616ab1eeb7df708c6c851349d27452d2ab0363405db9fc27c

  • SSDEEP

    12288:dWBqHHpQZzu3taAOWzSUN1g38VNsic5g2JsRgFKHyK2qGd:daq2F7sV2SHyK2qGd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 2ba505ed01a533554e6f2f315364dd11_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:4 windows x86 arch:x86

    0d87660e15e4e2499d63742f6c9630fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DefaultTab_license.rtf
    .rtf
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InitInstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/frg_license.rtf
    .rtf
  • $PLUGINSDIR/gc_license.rtf
    .rtf
  • $PLUGINSDIR/image13.bmp
  • $PLUGINSDIR/image14.bmp
  • $PLUGINSDIR/image17.bmp
  • $PLUGINSDIR/image18.bmp
  • $PLUGINSDIR/image19.bmp
  • $PLUGINSDIR/image21.bmp
  • $PLUGINSDIR/image22.bmp
  • $PLUGINSDIR/image24.bmp
  • $PLUGINSDIR/image26.bmp
  • $PLUGINSDIR/image28.bmp
  • $PLUGINSDIR/image29.bmp
  • $PLUGINSDIR/image31.bmp
  • $PLUGINSDIR/image33.bmp
  • $PLUGINSDIR/image35.bmp
  • $PLUGINSDIR/image36.bmp
  • $PLUGINSDIR/image37.bmp
  • $PLUGINSDIR/image38.bmp
  • $PLUGINSDIR/image39.bmp
  • $PLUGINSDIR/image40.bmp
  • $PLUGINSDIR/image41.bmp
  • $PLUGINSDIR/image42.bmp
  • $PLUGINSDIR/image43.bmp
  • $PLUGINSDIR/image44.bmp
  • $PLUGINSDIR/image45.bmp
  • $PLUGINSDIR/image46.bmp
  • $PLUGINSDIR/image46b.bmp
  • $PLUGINSDIR/image47.bmp
  • $PLUGINSDIR/intlib.dll
    .dll windows:4 windows x86 arch:x86

    e886a412cdaf11998a8eeffda508e913


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/jp_license.rtf
    .rtf
  • $PLUGINSDIR/license_Ciuvo.rtf
    .rtf
  • $PLUGINSDIR/license_Ciuvo_de.rtf
    .rtf
  • $PLUGINSDIR/license_GDS.rtf
    .rtf
  • $PLUGINSDIR/license_cb.rtf
    .rtf
  • $PLUGINSDIR/license_iolo.rtf
    .rtf
  • $PLUGINSDIR/license_pbr.rtf
    .rtf
  • $PLUGINSDIR/license_pw.rtf
    .rtf
  • $PLUGINSDIR/license_red.rtf
    .rtf
  • $PLUGINSDIR/license_rr.rtf
    .rtf
  • $PLUGINSDIR/license_rs.rtf
    .rtf
  • $PLUGINSDIR/license_tfp.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections