General

  • Target

    5ab2c1ea463352b660aa2cf53f821c8e_JaffaCakes118

  • Size

    2.5MB

  • MD5

    5ab2c1ea463352b660aa2cf53f821c8e

  • SHA1

    ce9ba12f2d5daad67199f87f73a38c60c756b4ff

  • SHA256

    e395531da2a5d72c85ca382264e227f73a6c1f6702e1d3a73492308663f9353c

  • SHA512

    3268dc1f68bdaf0d3922997745e6a6864b2d495d780a68f48fafa4633209fbd184812a05eee22185dffe6bc05a8981699f2a72d2aa5292828eb9f82068edb01c

  • SSDEEP

    49152:EPwF+fe2UM/WZCR231qPqZqYlaDkZIH8r1c1DitzO+GkXVWJoJk5ww:EPwF+fe2QCyqCdaDkZIH8r1YKi+G4VON

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5ab2c1ea463352b660aa2cf53f821c8e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/FailedTarget.ftd
    .exe windows:4 windows x86 arch:x86

    b0d04becaab7f3c6ae26109427c5b20e


    Headers

    Imports

    Sections

  • $SYSDIR/KlgDrv.sys
    .sys windows:5 windows x86 arch:x86

    d2de504c945d073ec378738b3722bd82


    Headers

    Imports

    Sections

  • ScrKlg/GloMon.dat
    .dll regsvr32 windows:5 windows x86 arch:x86

    0c9984efcc2664654092dcd5369b4170


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/InstAst.exe
    .exe windows:5 windows x86 arch:x86

    657e6a8bec9d10119902089cc7f3370f


    Headers

    Imports

    Sections

  • ScrKlg/LogSee.exe
    .exe windows:5 windows x86 arch:x86

    796ba0f65eb490c3535e2deca6ddb51c


    Headers

    Imports

    Sections

  • ScrKlg/LpcClt.dat
    .dll regsvr32 windows:5 windows x86 arch:x86

    e08dba9e3798c58a36b91bd491cf8da0


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/LpcSvr.dat
    .dll regsvr32 windows:5 windows x86 arch:x86

    083f8cd1ce748cf4c86489ab5d705d4d


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/Microsoft.VC90.ATL.manifest
    .xml
  • ScrKlg/Microsoft.VC90.CRT.manifest
    .xml
  • ScrKlg/Microsoft.VC90.MFC.manifest
    .xml
  • ScrKlg/ObjLoader.dll
    .dll windows:5 windows x86 arch:x86

    efa2748b0f1166c68ecf9ad597f48bbe


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/ParSetKlg.exe
    .exe windows:5 windows x86 arch:x86

    27910def808171a44162b99eaa250d07


    Headers

    Imports

    Sections

  • ScrKlg/RunSvc.exe
    .exe windows:5 windows x86 arch:x86

    9eee8c666df9a7087262e2478a5cbe98


    Headers

    Imports

    Sections

  • ScrKlg/RunSvr.exe
    .exe windows:5 windows x86 arch:x86

    62eeb11ced7a0861fa58379f39627e2f


    Headers

    Imports

    Sections

  • ScrKlg/RunSvr_.exe
    .exe windows:5 windows x86 arch:x86

    7b9b4594e17d70014974738fcdd9b696


    Headers

    Imports

    Sections

  • ScrKlg/atl90.dll
    .dll windows:5 windows x86 arch:x86

    17ed9dd04d0bbfc19b81bf75e8ebe774


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ScrKlg/extrapack.dat
    .dll regsvr32 windows:5 windows x86 arch:x86

    b651e76210ea22a4762b2d87e1127624


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/fav_sdl.ico
  • ScrKlg/mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    814d9e5c82b805568941908a38d8a5f5


    Code Sign

    Headers

    Imports

    Sections

  • ScrKlg/mfcm90u.dll
    .dll windows:5 windows x86 arch:x86

    8835e897cda95e4221fbfed49b505c04


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/miscpack.dat
    .dll regsvr32 windows:5 windows x86 arch:x86

    b700823820ec3953c6b3d1b74266678d


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • ScrKlg/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ScrKlg/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ScrKlg/respackklg.dat
    .dll regsvr32 windows:5 windows x86 arch:x86

    afb8eb2b1785cf8e660fe3c81d5db5ef


    Headers

    Imports

    Exports

    Sections

  • ScrKlgUninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp