General

  • Target

    63b01a5914ad884c01eb870f5c8a3015_JaffaCakes118

  • Size

    3.7MB

  • MD5

    63b01a5914ad884c01eb870f5c8a3015

  • SHA1

    69b08c94f4e751ed5b0bf45f794a36abacd0025c

  • SHA256

    f8ec82d68eed16ada58ebf29079496866d5fc607308c1117500c96ed0dd5c3e3

  • SHA512

    0dedfad1d2b0a47de09cb78812a5b45c1ca39c4852598248a45d9a7465e9f170de295fd7ace247459850fde86bf7993ad2ed7d9140da447aa8f8f8d0142b6423

  • SSDEEP

    98304:OsRq6qzO/SPs/mSQZrkdvV4ZAxDBxyslV8PM:lq6qzOjOxEd42oslaM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 63b01a5914ad884c01eb870f5c8a3015_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IsVista.dll
    .dll windows:4 windows x86 arch:x86

    efa700f367af492674a29b601d27bd91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ischeck.dll
    .dll windows:4 windows x86 arch:x86

    251a9619bbd921d60321154c493fcc9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stack.dll
    .dll windows:4 windows x86 arch:x86

    55ae76a2cfe164921f566c03cfbba5ec


    Headers

    Imports

    Exports

    Sections

  • Yacson.exe
    .exe windows:4 windows x86 arch:x86

    adb84d0469a70125af222ea6c243f647


    Headers

    Imports

    Sections

  • YacsonUpdate.exe
    .exe windows:4 windows x86 arch:x86

    100636ccc758877fa56a1a3e703bdedd


    Headers

    Imports

    Sections

  • Ysonfld.yac
  • avxdisk.dll
    .dll windows:4 windows x86 arch:x86

    27cf9cfbea40d9de75b282a2af83716a


    Headers

    Imports

    Exports

    Sections

  • bdcore.dll
    .dll windows:4 windows x86 arch:x86

    2925528018b2621caf76ae37831a0b5b


    Headers

    Imports

    Exports

    Sections

  • data/ysondaxo.yac
  • data/ysondmwc.yac
  • data/ysondmwd.yac
  • data/ysondmwe.yac
  • data/ysondmwq.yac
  • data/ysondmwqs.yac
  • data/ysondmwt.yac
  • data/ysondmwtc.yac
  • lang/Uninstall.exe.nsis
  • lang/Yacson.lng
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcd2542f46e742c06cabefff84c7320d


    Headers

    Imports

    Exports

    Sections

  • msvcirt.dll
    .dll windows:5 windows x86 arch:x86

    c9e4d1c3c611270cb8fe488259e71c2a


    Headers

    Imports

    Exports

    Sections

  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • ysonhis.dll
    .dll windows:4 windows x86 arch:x86

    8d854d2d2b3321d343d0c69741cb5f6e


    Headers

    Imports

    Exports

    Sections

  • ysonhrd.dll
    .dll windows:4 windows x86 arch:x86

    2c630b2ac2b728c6095569c3f99b1a96


    Headers

    Imports

    Exports

    Sections

  • ysonmwb.dll
    .dll windows:4 windows x86 arch:x86

    a7eaf81b261a74a65c54d54d904f7644


    Headers

    Imports

    Exports

    Sections

  • ysonmwnt.dll
    .dll windows:4 windows x86 arch:x86

    36717c3bf878fa96cba4d1540ba376a7


    Headers

    Imports

    Exports

    Sections

  • ysonmwrb.exe
    .exe windows:4 windows x86 arch:x86

    eef66248f19923cf259bcbc408c8fa53


    Headers

    Imports

    Sections

  • ysonmwt.dll
    .dll windows:4 windows x86 arch:x86

    4ae3df1ccde9d4e8b1f6f86e424f894d


    Headers

    Imports

    Exports

    Sections

  • ysonreg.dll
    .dll windows:4 windows x86 arch:x86

    32cf9c44db976bde7379b77730999e47


    Headers

    Imports

    Exports

    Sections

  • ysonstg.yac
  • ysonupk.dll
    .dll windows:4 windows x86 arch:x86

    5bd6dbb3e9efed8a9f31eed81578b4bf


    Headers

    Imports

    Exports

    Sections

  • ysonupm.dll
    .dll windows:4 windows x86 arch:x86

    3e2e232a3cc154c2f746250d8585aec6


    Headers

    Imports

    Exports

    Sections

  • ysonupt.dll
    .dll windows:4 windows x86 arch:x86

    3e2e232a3cc154c2f746250d8585aec6


    Headers

    Imports

    Exports

    Sections