General

  • Target

    304603110894deedff704b97827dfb99_JaffaCakes118

  • Size

    4.7MB

  • MD5

    304603110894deedff704b97827dfb99

  • SHA1

    d3c89ebf0dc7714166fc75da46106d0de7bb8721

  • SHA256

    c77ac0954c3aec5f2ccca17a9f4aabf60aa10503c2fac576adee55abff5dbf05

  • SHA512

    9fe2eefb55c3acadd0e4feb9442a3836a0a2259079b65b66efeea10564a241ebb4cd21de16eec951e332ce1568f0ab2b092067fb275d2197c9c480a800a0f678

  • SSDEEP

    98304:UNrF9e5fUNKlRA5251syDwsibdd/OEqazVkoiJKrc4T7FyWdxgKZ3hkO:kWyKlRT51s6wsiKEH2BKT7FyWHgKT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 46 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 5 IoCs

Files

  • 304603110894deedff704b97827dfb99_JaffaCakes118
    .rar
  • simona_8/Autorun.exe
    .exe windows:4 windows x86 arch:x86

    d2649867cedca90066a116140657c3c4


    Headers

    Imports

    Sections

  • simona_8/Instalers/ChangeLog
  • simona_8/Instalers/LICENSE.txt
  • simona_8/Instalers/OcsAgentSetup.exe
    .exe windows:4 windows x86 arch:x86

    51af09c6f94705a14d7c2cf34b244036


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetACL.exe
    .exe windows:5 windows x86 arch:x86

    4107c274be99512943dedb53314a3190


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0a429a757fe850cda370ca04651f8539


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/options.ini
  • $PLUGINSDIR/services.dll
    .dll windows:4 windows x86 arch:x86

    caddd9e268e5bc2a8b67248bc1f72836


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • BiosInfo.exe
  • Libeay32.dll
    .dll windows:4 windows x86 arch:x86

    f406fff1847e3a8c708c5a07f17e5b19


    Headers

    Imports

    Exports

    Sections

  • Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcd2542f46e742c06cabefff84c7320d


    Headers

    Imports

    Exports

    Sections

  • OCSInventory.exe
    .exe windows:4 windows x86 arch:x86

    bc41c3703e0e24e347878d9fc67cad49


    Headers

    Imports

    Sections

  • OcsService.dll
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Exports

    Sections

  • OcsService.exe
    .exe windows:4 windows x86 arch:x86

    b6ecebaf1711b5474e1e5423d39c846b


    Headers

    Imports

    Sections

  • OcsWmi.dll
    .dll windows:4 windows x86 arch:x86

    cdbed0462be47c495b7f5a27d9eb9b19


    Headers

    Imports

    Exports

    Sections

  • Ocs_contact.exe
    .exe windows:4 windows x86 arch:x86

    51af09c6f94705a14d7c2cf34b244036


    Headers

    Imports

    Sections

  • PsApi.dll
    .dll windows:4 windows x86 arch:x86

    3b5b4bad881057af15fc35648ebcf206


    Headers

    Imports

    Exports

    Sections

  • SSLeay32.dll
    .dll windows:4 windows x86 arch:x86

    439f91ef5d15941c3e805c4fc238afe9


    Headers

    Imports

    Exports

    Sections

  • SysInfo.dll
    .dll windows:4 windows x86 arch:x86

    3faafbe016ef2231599bb87d9fd8bfb6


    Headers

    Imports

    Exports

    Sections

  • Zlib.dll
    .dll windows:4 windows x86 arch:x86

    43bdd40916b03a6ce3c7108f3f7f52ab


    Headers

    Imports

    Exports

    Sections

  • download.exe
    .exe windows:4 windows x86 arch:x86

    a7ab07d59b89a426a6d21ba77d70a76c


    Headers

    Imports

    Sections

  • inst32.exe
    .exe windows:4 windows x86 arch:x86

    9d80a2c7e6301e107c893e59165e03ef


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    51af09c6f94705a14d7c2cf34b244036


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/services.dll
    .dll windows:4 windows x86 arch:x86

    caddd9e268e5bc2a8b67248bc1f72836


    Headers

    Imports

    Exports

    Sections

  • simona_8/Instalers/OcsAgentSetup.log
  • simona_8/Instalers/OcsLogon.exe
    .exe windows:4 windows x86 arch:x86

    51af09c6f94705a14d7c2cf34b244036


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSFloc.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • simona_8/Instalers/WinSgtc.exe
    .exe windows:4 windows x86 arch:x86

    02785628caf4d38d3060c4ab163290e7


    Headers

    Imports

    Sections

  • simona_8/Instalers/last_file.conf
  • simona_8/Instalers/ocsagent.exe
    .exe windows:4 windows x86 arch:x86

    51af09c6f94705a14d7c2cf34b244036


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • BiosInfo.exe
  • Libeay32.dll
    .dll windows:4 windows x86 arch:x86

    f406fff1847e3a8c708c5a07f17e5b19


    Headers

    Imports

    Exports

    Sections

  • Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcd2542f46e742c06cabefff84c7320d


    Headers

    Imports

    Exports

    Sections

  • OCSInventory.exe
    .exe windows:4 windows x86 arch:x86

    bc41c3703e0e24e347878d9fc67cad49


    Headers

    Imports

    Sections

  • OcsLogon.exe
    .exe windows:4 windows x86 arch:x86

    51af09c6f94705a14d7c2cf34b244036


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSFloc.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • OcsWmi.dll
    .dll windows:4 windows x86 arch:x86

    cdbed0462be47c495b7f5a27d9eb9b19


    Headers

    Imports

    Exports

    Sections

  • PsApi.dll
    .dll windows:4 windows x86 arch:x86

    3b5b4bad881057af15fc35648ebcf206


    Headers

    Imports

    Exports

    Sections

  • SSLeay32.dll
    .dll windows:4 windows x86 arch:x86

    439f91ef5d15941c3e805c4fc238afe9


    Headers

    Imports

    Exports

    Sections

  • SysInfo.dll
    .dll windows:4 windows x86 arch:x86

    3faafbe016ef2231599bb87d9fd8bfb6


    Headers

    Imports

    Exports

    Sections

  • Zlib.dll
    .dll windows:4 windows x86 arch:x86

    43bdd40916b03a6ce3c7108f3f7f52ab


    Headers

    Imports

    Exports

    Sections

  • download.exe
    .exe windows:4 windows x86 arch:x86

    a7ab07d59b89a426a6d21ba77d70a76c


    Headers

    Imports

    Sections

  • simona_8/Instalers/setclient.conf