General

  • Target

    3465359b7d24071482e65ac306b9a3e0_JaffaCakes118

  • Size

    736KB

  • MD5

    3465359b7d24071482e65ac306b9a3e0

  • SHA1

    e0506e00340c4134ffe37cd9a1d40b0557158e76

  • SHA256

    d4696b7a0c22038bd8fff4ba0674d5a43c7a5b6298e2a7e02de6cb67cb497496

  • SHA512

    32ae61e1503ceca27f3a8396cb90a015d334a85ccda1832b2e7d615916a96a471dcadf4897a3d37da82927cf8ebf943329b3ee5ed17cb3b7911ae97bdcfbee96

  • SSDEEP

    12288:MY2+lA00+eynqACKGcvea3ta/Phhtt08HWIUnDObJd5A8uvK88ODmvK5Sy5vKrrx:MYEUTCcf3Eu+bJd5A8uvK8QvKPvKfHPp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 3465359b7d24071482e65ac306b9a3e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:4 windows x86 arch:x86

    0d87660e15e4e2499d63742f6c9630fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DefaultTab_license.rtf
    .rtf
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dllstub.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/frg_license.rtf
    .rtf
  • $PLUGINSDIR/gc_license.rtf
    .rtf
  • $PLUGINSDIR/image13.bmp
  • $PLUGINSDIR/image14.bmp
  • $PLUGINSDIR/image17.bmp
  • $PLUGINSDIR/image18.bmp
  • $PLUGINSDIR/image19.bmp
  • $PLUGINSDIR/image22.bmp
  • $PLUGINSDIR/image26.bmp
  • $PLUGINSDIR/image28.bmp
  • $PLUGINSDIR/image29.bmp
  • $PLUGINSDIR/image31.bmp
  • $PLUGINSDIR/image36.bmp
  • $PLUGINSDIR/image37.bmp
  • $PLUGINSDIR/image38.bmp
  • $PLUGINSDIR/image39.bmp
  • $PLUGINSDIR/image40.bmp
  • $PLUGINSDIR/image41.bmp
  • $PLUGINSDIR/image42.bmp
  • $PLUGINSDIR/image43.bmp
  • $PLUGINSDIR/image44.bmp
  • $PLUGINSDIR/image46.bmp
  • $PLUGINSDIR/image46b.bmp
  • $PLUGINSDIR/image47.bmp
  • $PLUGINSDIR/image48.bmp
  • $PLUGINSDIR/image49.bmp
  • $PLUGINSDIR/image50.bmp
  • $PLUGINSDIR/image51.bmp
  • $PLUGINSDIR/image52.bmp
  • $PLUGINSDIR/image54.bmp
  • $PLUGINSDIR/image55.bmp
  • $PLUGINSDIR/image56.bmp
  • $PLUGINSDIR/image57.bmp
  • $PLUGINSDIR/image58.bmp
  • $PLUGINSDIR/image6.bmp
  • $PLUGINSDIR/intlib.dll
    .dll windows:4 windows x86 arch:x86

    e886a412cdaf11998a8eeffda508e913


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license_BL.rtf
    .rtf
  • $PLUGINSDIR/license_GDS.rtf
    .rtf
  • $PLUGINSDIR/license_SIM.rtf
    .rtf
  • $PLUGINSDIR/license_iolo.rtf
    .rtf
  • $PLUGINSDIR/license_pw.rtf
    .rtf
  • $PLUGINSDIR/license_rr.rtf
    .rtf
  • $PLUGINSDIR/license_rs.rtf
    .rtf
  • $PLUGINSDIR/license_tfp.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections