General

  • Target

    30dc1d00d08380381d448e3e730b99d8_JaffaCakes118

  • Size

    826KB

  • MD5

    30dc1d00d08380381d448e3e730b99d8

  • SHA1

    7c6979234c8ef10dd7f50402e5a02e33918fbf8e

  • SHA256

    e8eb959e0d699288619bc7989b770d1893223afb301bdde235261e3b8f910b90

  • SHA512

    5985f19f8805254b69df3273ae9417065fd2c2f155775be252f27625e48f98b3c1c624681609a0c13d9ea201859dfb6a32265e3ebce0ca0df63ab99b000b38ab

  • SSDEEP

    24576:/aUjsjkycf3Eo631bJd5A8uvKxsLvKRyvKiHPfptH:5js23EowbSDvKevKRyvKivRtH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 30dc1d00d08380381d448e3e730b99d8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:4 windows x86 arch:x86

    0d87660e15e4e2499d63742f6c9630fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DefaultTab_license.rtf
    .rtf
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dllstub.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/frg_license.rtf
    .rtf
  • $PLUGINSDIR/gc_license.rtf
    .rtf
  • $PLUGINSDIR/image13.bmp
  • $PLUGINSDIR/image14.bmp
  • $PLUGINSDIR/image17.bmp
  • $PLUGINSDIR/image18.bmp
  • $PLUGINSDIR/image19.bmp
  • $PLUGINSDIR/image22.bmp
  • $PLUGINSDIR/image26.bmp
  • $PLUGINSDIR/image28.bmp
  • $PLUGINSDIR/image29.bmp
  • $PLUGINSDIR/image31.bmp
  • $PLUGINSDIR/image36.bmp
  • $PLUGINSDIR/image37.bmp
  • $PLUGINSDIR/image38.bmp
  • $PLUGINSDIR/image39.bmp
  • $PLUGINSDIR/image40.bmp
  • $PLUGINSDIR/image40a.bmp
  • $PLUGINSDIR/image41.bmp
  • $PLUGINSDIR/image42.bmp
  • $PLUGINSDIR/image43.bmp
  • $PLUGINSDIR/image44.bmp
  • $PLUGINSDIR/image46.bmp
  • $PLUGINSDIR/image46b.bmp
  • $PLUGINSDIR/image47.bmp
  • $PLUGINSDIR/image48.bmp
  • $PLUGINSDIR/image49.bmp
  • $PLUGINSDIR/image50.bmp
  • $PLUGINSDIR/image51.bmp
  • $PLUGINSDIR/image52.bmp
  • $PLUGINSDIR/image54.bmp
  • $PLUGINSDIR/image55.bmp
  • $PLUGINSDIR/image56.bmp
  • $PLUGINSDIR/image57.bmp
  • $PLUGINSDIR/image58.bmp
  • $PLUGINSDIR/image59.bmp
  • $PLUGINSDIR/image6.bmp
  • $PLUGINSDIR/image60.bmp
  • $PLUGINSDIR/image61.bmp
  • $PLUGINSDIR/intlib.dll
    .dll windows:4 windows x86 arch:x86

    e886a412cdaf11998a8eeffda508e913


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license_BL.rtf
    .rtf
  • $PLUGINSDIR/license_CF.rtf
    .rtf
  • $PLUGINSDIR/license_GDS.rtf
    .rtf
  • $PLUGINSDIR/license_MLPC.rtf
    .rtf
  • $PLUGINSDIR/license_SIM.rtf
    .rtf
  • $PLUGINSDIR/license_csu.rtf
    .rtf
  • $PLUGINSDIR/license_iolo.rtf
    .rtf
  • $PLUGINSDIR/license_ps.rtf
    .rtf
  • $PLUGINSDIR/license_pw.rtf
    .rtf
  • $PLUGINSDIR/license_rr.rtf
    .rtf
  • $PLUGINSDIR/license_rs.rtf
    .rtf
  • $PLUGINSDIR/license_tfp.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections