General

  • Target

    38d80648d71af019acba795a2e82d7b8_JaffaCakes118

  • Size

    463KB

  • MD5

    38d80648d71af019acba795a2e82d7b8

  • SHA1

    3fd2c6b5dae0316c785fd94a2599e0c3874fbd1b

  • SHA256

    4112bd2a2262d6fd7a6fc3bea80218ce65a4e161c53f0002db0c92d32bffc569

  • SHA512

    7547ed97fda5de39e0b643f3ef69a393b9d7dbecae0e968f559a734f38e694f0afb1ada865b9ad92bc72984743b115cf460e07c79d8b5297785ca2fdc64ca5a4

  • SSDEEP

    6144:leTeM/9XvhRZCU0XfHKHdczrgEX65AAnkiKX23ahhQNE96gRLB52qVRILjkYuK:pMdNePqHuz8EXvp2dKDnajZp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 38d80648d71af019acba795a2e82d7b8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ButtonLinker.dll
    .dll windows:4 windows x86 arch:x86

    8466b6530f29387ac28e94fe1e74b98f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/waterctrl.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/ad.bat
  • $TEMP/fs.gif
    .gif
  • ComDlls/LinkSimulate.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d610efff26feeb97f00e3f202df7a666


    Headers

    Imports

    Exports

    Sections

  • Program/XLUser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fdcba1d9b208454d659781013afef3d4


    Code Sign

    Headers

    Imports

    Exports

    Sections