General

  • Target

    2f56458224246dd1dc161b06417fa479_JaffaCakes118

  • Size

    3.6MB

  • MD5

    2f56458224246dd1dc161b06417fa479

  • SHA1

    802796b58e676726921925125994db7fcab99fcf

  • SHA256

    aa112601ba5829d77de82236e566db416f6d9599f106e48f11f1598afaaf673f

  • SHA512

    9524f78d107770e1a03a8227e69875c552f5cebc43c0758fe5519c74bc14c077ace6f5880b4439aaf314ca38138ec803cbc807ebf517366fd6680a149866dd25

  • SSDEEP

    98304:DUN0w9irsnafCCRq7J1JW+r2f6vFWI1NxWWAzV1JHFRgv:DUN5EbCCM7J1Zif6f3YWAzPJHnO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2f56458224246dd1dc161b06417fa479_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    0fac1ea73ed8196bbd33ef5ed5376b4f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    ee01c5cc33cdb3294484fc93e41c14ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/shortcuts.ini
  • COPYING.txt
  • IMA_ADPCM_pwplugin.dll
    .dll windows:4 windows x86 arch:x86

    9b527f6ab35c30826aff7caf17471440


    Headers

    Imports

    Exports

    Sections

  • LPC_10_pwplugin.dll
    .dll windows:4 windows x86 arch:x86

    9d722bf98176028c974fb9ebdee58404


    Headers

    Imports

    Exports

    Sections

  • MCConfig.dll
    .dll windows:4 windows x86 arch:x86

    d0e1f8bbb3160eb5bc7dc05b4b1e83ee


    Headers

    Imports

    Exports

    Sections

  • NeosAppModule.dll
    .dll windows:4 windows x86 arch:x86

    96a8ec412858a637750b430c36c75b02


    Headers

    Imports

    Exports

    Sections

  • OpenH323n.dll
    .dll windows:4 windows x86 arch:x86

    c6ad292a470d979ce76930688c3c1bdd


    Headers

    Imports

    Sections

  • PTLib.dll
    .dll windows:4 windows x86 arch:x86

    cc62409c73f39e9c41a2b3a18ca00fd9


    Headers

    Imports

    Sections

  • cximagecrt.dll
    .dll windows:4 windows x86 arch:x86

    d7c474c3a7ac4399008a6b03f98ae733


    Headers

    Imports

    Exports

    Sections

  • emoticons/neos/amazed.bmp
  • emoticons/neos/angel.bmp
  • emoticons/neos/angry.bmp
  • emoticons/neos/broken_heart.bmp
  • emoticons/neos/cake.bmp
  • emoticons/neos/clock.bmp
  • emoticons/neos/coffee.bmp
  • emoticons/neos/confused.bmp
  • emoticons/neos/crying.bmp
  • emoticons/neos/dumb.bmp
  • emoticons/neos/embarrassed.bmp
  • emoticons/neos/envelope.bmp
  • emoticons/neos/evil.bmp
  • emoticons/neos/heart.bmp
  • emoticons/neos/icondef.xml
    .xml
  • emoticons/neos/kbee.bmp
  • emoticons/neos/kiss.bmp
  • emoticons/neos/light.bmp
  • emoticons/neos/mate.bmp
  • emoticons/neos/mute.bmp
  • emoticons/neos/note.bmp
  • emoticons/neos/novamens.bmp
  • emoticons/neos/omg_smile.bmp
  • emoticons/neos/pancho.bmp
  • emoticons/neos/phone.bmp
  • emoticons/neos/present.bmp
  • emoticons/neos/sad.bmp
  • emoticons/neos/sleep.bmp
  • emoticons/neos/smile.bmp
  • emoticons/neos/star.bmp
  • emoticons/neos/sunglass.bmp
  • emoticons/neos/teeth.bmp
  • emoticons/neos/thumbs_down.bmp
  • emoticons/neos/thumbs_up.bmp
  • emoticons/neos/tongue.bmp
  • emoticons/neos/what.bmp
  • emoticons/neos/wink.bmp
  • eula_eng.txt
  • eula_port.txt
  • eula_spa.txt
  • expat.dll
    .dll windows:4 windows x86 arch:x86

    f2f61bc38ceddda76819f7a98210b400


    Headers

    Imports

    Exports

    Sections

  • g726codec_pwplugin.dll
    .dll windows:4 windows x86 arch:x86

    9b527f6ab35c30826aff7caf17471440


    Headers

    Imports

    Exports

    Sections

  • gsm0610_pwplugin.dll
    .dll windows:4 windows x86 arch:x86

    0f131c104d271f5a9074edd7e7856856


    Headers

    Imports

    Exports

    Sections

  • idletime.dll
    .dll windows:4 windows x86 arch:x86

    3a2481150fe1345076db4714b60b6181


    Headers

    Imports

    Exports

    Sections

  • ilbccodec_pwplugin.dll
    .dll windows:4 windows x86 arch:x86

    c67fe92a9a425d8712d480587f4754a4


    Headers

    Imports

    Exports

    Sections

  • jabberoo.dll
    .dll windows:4 windows x86 arch:x86

    2e4d17c53b1a203855c6f7169d2b2ef5


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    7c61788535ac140d3caea1026f94ce89


    Headers

    Imports

    Exports

    Sections

  • libnvui.dll
    .dll windows:4 windows x86 arch:x86

    42211926db0466d6a270c03b7eaad1bd


    Headers

    Imports

    Exports

    Sections

  • libsigc++1.2.dll
    .dll windows:4 windows x86 arch:x86

    9e073abd8bdffff0431a80f066a1cb88


    Headers

    Imports

    Exports

    Sections

  • libxml2.dll
    .dll windows:4 windows x86 arch:x86

    62ba229eb2b065d8bab965b6e2afc940


    Headers

    Imports

    Exports

    Sections

  • neos.exe
    .exe windows:4 windows x86 arch:x86

    666f073021fefbc0030c432617a1e134


    Headers

    Imports

    Sections

  • neos_french.dll
    .dll windows:4 windows x86 arch:x86

    c4660820c612dc68869e13ac235f1af1


    Headers

    Imports

    Exports

    Sections

  • neos_portugues.dll
    .dll windows:4 windows x86 arch:x86

    c4660820c612dc68869e13ac235f1af1


    Headers

    Imports

    Exports

    Sections

  • neos_spanish.dll
    .dll windows:4 windows x86 arch:x86

    c4660820c612dc68869e13ac235f1af1


    Headers

    Imports

    Exports

    Sections

  • neosh323.dll
    .dll windows:4 windows x86 arch:x86

    0ef4fc7792d862384b06f72082bdbc74


    Headers

    Imports

    Exports

    Sections

  • sounds/appshare.wav
  • sounds/filetransfer.wav
  • sounds/message.wav
  • sounds/online.wav
  • sounds/subscription.wav
  • sounds/subsrequest.wav
  • sounds/video.wav
  • sounds/whiteboard.wav
  • speexcodec_pwplugin.dll
    .dll windows:4 windows x86 arch:x86

    fced29cafaf48a47f51c8eaa0c87823e


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    727c7f5e2972ea6be667c167eaa5d317


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    0fac1ea73ed8196bbd33ef5ed5376b4f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    ee01c5cc33cdb3294484fc93e41c14ad


    Headers

    Imports

    Exports

    Sections

  • xml_plus.dll
    .dll windows:4 windows x86 arch:x86

    2399246551032d7ea9cacc7842c64395


    Headers

    Imports

    Exports

    Sections