General

  • Target

    4da624dc4d564d2a4a9c5de15c7b101a_JaffaCakes118

  • Size

    6.3MB

  • MD5

    4da624dc4d564d2a4a9c5de15c7b101a

  • SHA1

    efe03e3a104dda3a5bb6d0332fcd4f3ffd4ab2b6

  • SHA256

    17d77208ae563313fb8d33cd6425d36b6cf53d07e4dcf0bc99bc689e9c9a2ff8

  • SHA512

    acfe55c3fc6b49fa86f46910f89216ef9f3568241e6165a25685affa5000fdf86176f5ae07d5c56a15c4e03b2d6c32b04108f53f6a563a37caf64970d014c2de

  • SSDEEP

    196608:eAg+sN8euX/7qJgH8940CduG0H2/lYrtVQc5nju2cVod4n:e3xLuXV8A2QlYJycZju2cy6n

Score
3/10

Malware Config

Signatures

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 4da624dc4d564d2a4a9c5de15c7b101a_JaffaCakes118
    .rar
  • crack/handy.backup.5.7.0.4-NoPE.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hb.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    e68b707a8a870eb0463fa562e1b2db9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/custom_dvd.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/esebcli2.dll
    .dll windows:4 windows x86 arch:x86

    b4f9a249c6583bc13e5e91504166f222


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/hblogon.dll
    .dll windows:4 windows x86 arch:x86

    30f4bcd42b37c181c5b63563e4c144e5


    Headers

    Imports

    Exports

    Sections

  • Customizes/Chinese.xml
    .xml
  • Customizes/Czech.xml
    .xml
  • Customizes/English.xml
    .xml
  • Customizes/French.xml
    .xml
  • Customizes/German.xml
    .xml
  • Customizes/Italian.xml
    .xml
  • Customizes/Korean.xml
    .xml
  • Customizes/Norwegian.xml
    .xml
  • Customizes/Russian.xml
    .xml
  • Customizes/Spanish.xml
    .xml
  • Customizes/Swedish.xml
    .xml
  • Customizes/default.cmz
  • HBPlugins/DBPlugin.dll
    .dll windows:4 windows x86 arch:x86

    4f6971323a2d3a651d95b0c8608fb491


    Headers

    Imports

    Exports

    Sections

  • HBPlugins/EmailPlugin.dll
    .dll windows:4 windows x86 arch:x86

    4da9a6424cdec858be8edfbbdb7d863b


    Headers

    Imports

    Exports

    Sections

  • HBPlugins/ExchangePlugin.dll
    .dll windows:4 windows x86 arch:x86

    fda62a207ffa6d2a214b4f39e98d967c


    Headers

    Imports

    Exports

    Sections

  • HBPlugins/ImagePlugin.dll
    .dll windows:4 windows x86 arch:x86

    5bbddba1079a8c737e5cea7de52079e9


    Headers

    Imports

    Exports

    Sections

  • HBPlugins/NotesPlugin.dll
    .dll windows:4 windows x86 arch:x86

    1e743a85f39d1ecc9f6a5b2d0106a172


    Headers

    Imports

    Exports

    Sections

  • HBShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c18c65f256b07a9fec59618ac766df33


    Headers

    Imports

    Exports

    Sections

  • Plugins/ICQPlugin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    149ad7a72cdde9e2c3c49c94f6c411ad


    Headers

    Imports

    Exports

    Sections

  • Plugins/OutlookPlugin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    23973d965f7e8bb745d09a07ba328779


    Headers

    Imports

    Exports

    Sections

  • Plugins/RegistryPlugin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    246206dd513d306123c0989aa2a5a931


    Headers

    Imports

    Exports

    Sections

  • Plugins/SpecialFoldersPlugin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    52abeaa310f45965d09a591aa12e4c7a


    Headers

    Imports

    Exports

    Sections

  • StarBurn.dll
    .dll windows:6 windows x86 arch:x86

    de249101d65e2d202b785d2b44b7eb8c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WnASPI32.dll
    .dll windows:6 windows x86 arch:x86

    bd421dcb050348ebae31c3c2a96c9205


    Headers

    Imports

    Exports

    Sections

  • backup.chm
    .chm
  • backup.exe
    .exe windows:4 windows x86 arch:x86

    1ea6bbc4f3a12a006c78589ba34d1e61


    Headers

    Imports

    Exports

    Sections

  • cdwr.dll
    .dll windows:4 windows x86 arch:x86

    7d0e044e380fb8ef2356e30ebd64f681


    Headers

    Imports

    Exports

    Sections

  • dvdwr.dll
    .dll windows:4 windows x86 arch:x86

    29cc2e0910060154c5d832e8eb10e6a7


    Headers

    Imports

    Exports

    Sections

  • eula.txt
  • hbagent.exe
    .exe windows:4 windows x86 arch:x86

    6c0727ffd949039b02d0f270319b8359


    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    7c61788535ac140d3caea1026f94ce89


    Headers

    Imports

    Exports

    Sections

  • messages.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcd2542f46e742c06cabefff84c7320d


    Headers

    Imports

    Exports

    Sections

  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • tips.txt
  • uihooks.dll
    .dll windows:4 windows x86 arch:x86

    e09086b2034c796ee1a7da5b2178c2db


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/uninstall.ini
  • ziplib.dll
    .dll windows:4 windows x86 arch:x86

    c41943496823e26ec4e205c3a3ed4b2b


    Headers

    Imports

    Exports

    Sections

  • 安装说明.url
    .url