6472071858e8636c8d8c5fc4984fa22a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6472071858e8636c8d8c5fc4984fa22a_JaffaCakes118
Size

587KB
MD5

6472071858e8636c8d8c5fc4984fa22a
SHA1

666f5cb3344bdc44feac2e56f597591f4ab4c7be
SHA256

2ffd2b2121e14406991e230f30dfc26d078903e45c3711dbb8bc4574f63b9103
SHA512

48e0cadadc77907115dbc1799d9814301bcee3fcfb21873fbec37e5c5fc76d8a897b04d2385900544ca8efad9e82b5d77bde0dc918186ef96eff38fd323c1085
SSDEEP

12288:BE47raKTf91fQKNvT4AJjCipP8frE/Vc6am/aAzYB5m9T/XoV0ySmrF/N:BRLTf/fX4E/pPkrbWiuNALvrF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Trial_Reset40Final/Plugins/ABBYY License.dll
unpack001/Trial_Reset40Final/Plugins/Aborange.de.dll
unpack001/Trial_Reset40Final/Plugins/BlindWrite.dll
unpack001/Trial_Reset40Final/Plugins/Empty Keys.dll
unpack001/Trial_Reset40Final/Plugins/GAlcott.com.dll
unpack001/Trial_Reset40Final/Plugins/Namo.dll
unpack001/Trial_Reset40Final/Plugins/Reflexive.dll
unpack001/Trial_Reset40Final/Plugins/Teklynx.dll
unpack001/Trial_Reset40Final/Plugins/Zylom.dll
unpack001/Trial_Reset40Final/Trial-Reset.exe

Files

6472071858e8636c8d8c5fc4984fa22a_JaffaCakes118
.zip
Trial_Reset40Final/Lists/AkaraExeLock320.txt
Trial_Reset40Final/Lists/BlumentalsSoftware.txt
Trial_Reset40Final/Lists/EditPlus.txt
Trial_Reset40Final/Lists/EleFun Games.txt
Trial_Reset40Final/Lists/GoldWave.txt
Trial_Reset40Final/Lists/NetMeter.txt
Trial_Reset40Final/Lists/PECompact.txt
Trial_Reset40Final/Lists/REAL Studio 2010r1.txt
Trial_Reset40Final/Lists/RegHide.txt
Trial_Reset40Final/Lists/Reggie.txt
Trial_Reset40Final/Lists/Trialware Dialog.txt
Trial_Reset40Final/Lists/WinImage.txt
Trial_Reset40Final/Lists/WinRAR.txt
Trial_Reset40Final/Lists/WinRK.txt
Trial_Reset40Final/Lists/WinZip.txt
Trial_Reset40Final/Plugins/ABBYY License.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 9KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/Aborange.de.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/BlindWrite.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/Empty Keys.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/GAlcott.com.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/Namo.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/Reflexive.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/Teklynx.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Plugins/Zylom.dll
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/Trial-Reset.chm
.chm
Trial_Reset40Final/Trial-Reset.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 245KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Trial_Reset40Final/src/Declarations.bas
Trial_Reset40Final/src/FRMAbout.frm
Trial_Reset40Final/src/FRMAbout.frx
Trial_Reset40Final/src/FRMAdd.frm
.vbs
Trial_Reset40Final/src/FRMAdd.frx
Trial_Reset40Final/src/FRMMain.frm
.vbs
Trial_Reset40Final/src/FRMMain.frx
Trial_Reset40Final/src/FRMProtect.frm
.vbs
Trial_Reset40Final/src/FRMProtect.frx
Trial_Reset40Final/src/FRMSTClear.frm
.vbs
Trial_Reset40Final/src/FRMSTClear.frx
Trial_Reset40Final/src/FRMToolbar.frm
.vbs
Trial_Reset40Final/src/FRMView.frm
.vbs
Trial_Reset40Final/src/FRMView.frx
Trial_Reset40Final/src/FRmToolbar.frx
Trial_Reset40Final/src/Functions.bas
.vbs
Trial_Reset40Final/src/Help/Trial-Reset.hhc
.html
Trial_Reset40Final/src/Help/Trial-Reset.hhk
.html
Trial_Reset40Final/src/Help/Trial-Reset.hhp
Trial_Reset40Final/src/Help/commandline.htm
.html
Trial_Reset40Final/src/Help/edit.htm
.html
Trial_Reset40Final/src/Help/file.htm
.html
Trial_Reset40Final/src/Help/history.htm
.html
Trial_Reset40Final/src/Help/license.htm
.html
Trial_Reset40Final/src/Help/options.htm
.html
Trial_Reset40Final/src/Help/requirements.htm
.html
Trial_Reset40Final/src/Help/shortcut.htm
.html
Trial_Reset40Final/src/Help/supported.htm
.html
Trial_Reset40Final/src/Help/welcome.htm
.html
Trial_Reset40Final/src/Plugins/ABBYY License/ABBYY License.vbp
Trial_Reset40Final/src/Plugins/ABBYY License/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/ABBYY License/icon.res
Trial_Reset40Final/src/Plugins/Aborange/Aborange.vbp
Trial_Reset40Final/src/Plugins/Aborange/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/Aborange/icon.res
Trial_Reset40Final/src/Plugins/Alcohol Soft/Alcohol.vbp
Trial_Reset40Final/src/Plugins/Alcohol Soft/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/Alcohol Soft/icon.res
Trial_Reset40Final/src/Plugins/BlindWrite/BlindWrite.vbp
Trial_Reset40Final/src/Plugins/BlindWrite/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/BlindWrite/icon.res
Trial_Reset40Final/src/Plugins/Empty_Keys/Empty_Keys.vbp
Trial_Reset40Final/src/Plugins/Empty_Keys/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/Empty_Keys/icon.res
Trial_Reset40Final/src/Plugins/Functions.bas
.vbs
Trial_Reset40Final/src/Plugins/GAlcott/GAlcott.vbp
Trial_Reset40Final/src/Plugins/GAlcott/Plugin.bas
Trial_Reset40Final/src/Plugins/GAlcott/icon.res
Trial_Reset40Final/src/Plugins/Namo/Namo.vbp
Trial_Reset40Final/src/Plugins/Namo/Plugin.bas
Trial_Reset40Final/src/Plugins/Namo/icon.res
Trial_Reset40Final/src/Plugins/Reflexive/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/Reflexive/Reflexive.vbp
Trial_Reset40Final/src/Plugins/Reflexive/icon.res
Trial_Reset40Final/src/Plugins/Teklynx/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/Teklynx/Teklynx.vbp
Trial_Reset40Final/src/Plugins/Teklynx/icon.res
Trial_Reset40Final/src/Plugins/Zylom/Plugin.bas
.vbs
Trial_Reset40Final/src/Plugins/Zylom/Zylom.vbp
Trial_Reset40Final/src/Plugins/Zylom/icon.res
Trial_Reset40Final/src/Registry.bas
.vbs
Trial_Reset40Final/src/Scanners.bas
.vbs
Trial_Reset40Final/src/TrialReset.res
Trial_Reset40Final/src/TrialReset.vbp

Sharing

General

Malware Config

Signatures

Files

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 9KB - Virtual size: 40KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 8KB - Virtual size: 36KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 7KB - Virtual size: 32KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 8KB - Virtual size: 36KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 7KB - Virtual size: 32KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 8KB - Virtual size: 32KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 8KB - Virtual size: 36KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 8KB - Virtual size: 36KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 8KB - Virtual size: 32KB

.rsrc Size: 5KB - Virtual size: 8KB

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

.text
Size: 9KB - Virtual size: 40KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 36KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 7KB - Virtual size: 32KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 36KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 7KB - Virtual size: 32KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 32KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 36KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 36KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 32KB

.rsrc
Size: 5KB - Virtual size: 8KB

.text
Size: 245KB - Virtual size: 1.2MB

.rsrc
Size: 5KB - Virtual size: 8KB