General

  • Target

    48c2bddbb35eb965aba5067b753353ec_JaffaCakes118

  • Size

    3.4MB

  • MD5

    48c2bddbb35eb965aba5067b753353ec

  • SHA1

    1a2a6f1959076fa878fec813fb7c772019ec53f8

  • SHA256

    f7878b25efe31a9555dbc496159e52dec9c316a43ba680cb8c905e06603caa7f

  • SHA512

    875cd787199d840df8ac9ce865d760d1706f533a12d23f49c6b8156128ebc7a8d3cc828c8b0804529c34a415b6721d2e9ce43d0b6a0a5c21bf1d468e70b59b50

  • SSDEEP

    98304:26VKPecLWW5NOhLmbYpUWSxLf8iRy0fDONL+aRCzX+oV5Vy/kbD:HEjLh5g8YpFQLf8iRywDOktzXvO/kbD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 48c2bddbb35eb965aba5067b753353ec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $0
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoveOldVersion.dll
    .dll windows:4 windows x86 arch:x86

    8b714c50ac56108359c1df58cd0613ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/setup.ini
  • $SYSDIR/MyTrustMBBXControl1.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    77aef0007029b44e9596ad7b2f56fb3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/tgReAuthMBBXControl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    c88c2e9ee40587e4ee44d93d33714477


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NGSetup.dll
    .dll windows:4 windows x86 arch:x86

    b7e36a9fdb5ced025bcbb815e53fe7c8


    Headers

    Imports

    Exports

    Sections

  • epassMgr2K_enduser_trustgate.exe
    .exe windows:4 windows x86 arch:x86

    39d4f18acf6a421101d4821d78af76f6


    Headers

    Imports

    Sections

  • ft12.dat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp