General

  • Target

    31d37bc4cef7bde073702b7f75f128cd_JaffaCakes118

  • Size

    804KB

  • MD5

    31d37bc4cef7bde073702b7f75f128cd

  • SHA1

    8aa7d112d16187cb5dc534a9d067f4ff1dd570c4

  • SHA256

    7e7c45bbc20cd7055ea0fadec8c6c311f31f536d770b76aa5ccb350d5db99cfd

  • SHA512

    92a1932ddaa8bb05c22de091931d5724a5c22f4ad1b6e8abb1759051fd59d64481cb09ea7c0267e257c81dbeb8f3b6ccfcaa6867a81f5f6cdd252137ccd084d6

  • SSDEEP

    12288:ozx80ehM33QAnNMbRP/gfyKKLHOaPdXJCPC83TVUcSrYcW+jifIiqY:elf3tNSP8OuapJCa8jVUfYcc/qY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 31d37bc4cef7bde073702b7f75f128cd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
  • estraywave.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3256b5dae247dfb6f30ddffd5ec86187


    Headers

    Imports

    Exports

    Sections

  • estraywaveup.exe
    .exe windows:4 windows x86 arch:x86

    2b76a71ca8e4122d3546086a193b2126


    Headers

    Imports

    Sections

  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • volks.dll
    .dll windows:4 windows x86 arch:x86

    f71bb7f6adf4ad285fafdf1f6b397fa5


    Headers

    Imports

    Exports

    Sections

  • volks.exe
    .exe windows:4 windows x86 arch:x86

    db7ec1ea075f98604412f88bc2543676


    Headers

    Imports

    Sections