General

  • Target

    69308043f133e9f3f00e91b2c8e063f3_JaffaCakes118

  • Size

    508KB

  • MD5

    69308043f133e9f3f00e91b2c8e063f3

  • SHA1

    83105950b8d8698564df5b65e02a36bf59962d17

  • SHA256

    5ac68bf23a928e75e2b663b731aa2c9f81681f2824690282ae21e0b3c1a7171d

  • SHA512

    57a11b61ba68a6745e8142ff688ecd79d5c9b2d4d0157b4d09804ea2b984d66a642eafa1cc5c42df03b26dc7610915d87c05510058191e896985aa5d636ccb89

  • SSDEEP

    12288:KGE7IbKLRaI+94l4IXtYVNCrTFIHR+f+wvuGlAbCXMzC:KGuIbKLcR7IdYVNCryHR+f+wv4wx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 69308043f133e9f3f00e91b2c8e063f3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Headers

    Imports

    Sections

  • $0/chrome.manifest
  • $0/chrome/content/addcomponent.js
    .js
  • $0/chrome/content/addcomponent.xul
    .xml
  • $0/chrome/content/affiliate.xml
    .js .xml polyglot
  • $0/chrome/content/banner.xml
    .js .xml polyglot
  • $0/chrome/content/banner_offline.html
    .html .js polyglot
  • $0/chrome/content/basis.js
  • $0/chrome/content/bookmarks.xml
    .js .xml polyglot
  • $0/chrome/content/bookmarks_add.js
    .js
  • $0/chrome/content/bookmarks_add.xul
    .xml
  • $0/chrome/content/bookmarks_addbook.js
    .js
  • $0/chrome/content/bookmarks_addbook.xul
    .xml
  • $0/chrome/content/bookmarks_addtag.xul
    .xml
  • $0/chrome/content/bookmarks_editbook.js
    .js
  • $0/chrome/content/bookmarks_editbook.xul
    .xml
  • $0/chrome/content/bookmarks_edittag.js
    .js
  • $0/chrome/content/bookmarks_edittag.xul
    .xml
  • $0/chrome/content/bookmarks_import.js
    .js
  • $0/chrome/content/bookmarks_import.xul
    .xml
  • $0/chrome/content/bookmarks_manager.js
    .js
  • $0/chrome/content/bookmarks_manager.xul
    .xml
  • $0/chrome/content/bookmarks_rmbook.js
    .js
  • $0/chrome/content/bookmarks_rmbook.xul
    .xml
  • $0/chrome/content/bookmarks_rmtag.js
    .js
  • $0/chrome/content/bookmarks_rmtag.xul
    .xml
  • $0/chrome/content/browserbutton.xml
    .js .xml polyglot
  • $0/chrome/content/bubble.xml
    .js .xml polyglot
  • $0/chrome/content/bubble2.xml
    .js .xml polyglot
  • $0/chrome/content/bubble_button.xml
    .js .xml polyglot
  • $0/chrome/content/bubble_dlg.js
    .js
  • $0/chrome/content/bubble_dlg.xul
    .xml
  • $0/chrome/content/button.xml
    .js .xml polyglot
  • $0/chrome/content/caching_banner.html
    .html .js polyglot
  • $0/chrome/content/const.js
    .js
  • $0/chrome/content/custom_xml.xml
    .js .xml polyglot
  • $0/chrome/content/custom_xml_wt.xml
    .js .xml polyglot
  • $0/chrome/content/debugreport.xul
    .js .xml polyglot
  • $0/chrome/content/domain_switcher.xml
    .js .xml polyglot
  • $0/chrome/content/eventtracker.xml
    .js .xml polyglot
  • $0/chrome/content/fctb_searchplugin.xml
    .xml
  • $0/chrome/content/fctoolbar.js
    .js
  • $0/chrome/content/fctoolbar.xul
    .js .xml polyglot
  • $0/chrome/content/flashradio/FreeCause-Radio.swf
  • $0/chrome/content/flashradio/flash.html
    .html .js polyglot
  • $0/chrome/content/flashradio/proxy.swf
  • $0/chrome/content/flashradio/swfobject.js
    .js
  • $0/chrome/content/image.xml
    .js .xml polyglot
  • $0/chrome/content/include.xml
    .js .xml polyglot
  • $0/chrome/content/jsinclude.xml
    .js .xml polyglot
  • $0/chrome/content/label.xml
    .js .xml polyglot
  • $0/chrome/content/layout.xml
  • $0/chrome/content/lm.js
    .js
  • $0/chrome/content/lm.xul
    .xml
  • $0/chrome/content/locale/Localization_en.xml
  • $0/chrome/content/locale/Localization_fr.xml
  • $0/chrome/content/locale/Localization_ja.xml
  • $0/chrome/content/locale/Localization_ru.xml
  • $0/chrome/content/mail.xml
    .js .xml polyglot
  • $0/chrome/content/mail_Account.js
    .js
  • $0/chrome/content/mail_Account.xul
    .xml
  • $0/chrome/content/mail_AccountsList.js
    .js
  • $0/chrome/content/mail_AccountsList.xul
    .xml
  • $0/chrome/content/mail_pwd.js
    .js
  • $0/chrome/content/mail_pwd.xul
    .xml
  • $0/chrome/content/mail_testAccount.js
    .js
  • $0/chrome/content/mail_testAccount.xul
    .xml
  • $0/chrome/content/messaging.xml
    .js .xml polyglot
  • $0/chrome/content/messaging_dlg.js
    .js
  • $0/chrome/content/messaging_dlg.xul
    .xml
  • $0/chrome/content/messaging_view.js
    .js
  • $0/chrome/content/messaging_view.xul
    .xml
  • $0/chrome/content/optionsdlg.js
    .js
  • $0/chrome/content/optionsdlg.xul
    .xml
  • $0/chrome/content/pluginInterface.js
    .js
  • $0/chrome/content/prefs.js
    .js
  • $0/chrome/content/prefs.xul
  • $0/chrome/content/radio.xml
    .js .xml polyglot
  • $0/chrome/content/radio_add.js
    .js
  • $0/chrome/content/radio_add.xul
    .xml
  • $0/chrome/content/radio_delfolder.js
    .js
  • $0/chrome/content/radio_delfolder.xul
    .xml
  • $0/chrome/content/radio_edit.js
    .js
  • $0/chrome/content/radio_edit.xul
    .xml
  • $0/chrome/content/radio_editfolder.js
    .js
  • $0/chrome/content/radio_editfolder.xul
    .xml
  • $0/chrome/content/radio_options.js
    .js
  • $0/chrome/content/radio_options.xul
    .xml
  • $0/chrome/content/radio_search.js
    .js
  • $0/chrome/content/radio_search.xul
    .xml
  • $0/chrome/content/radio_volume.js
    .js
  • $0/chrome/content/radio_volume.xul
    .xml
  • $0/chrome/content/request_label.xml
    .js .xml polyglot
  • $0/chrome/content/rijndael.js
    .js
  • $0/chrome/content/rss.xml
    .js .xml polyglot
  • $0/chrome/content/rss_add.js
    .js
  • $0/chrome/content/rss_add.xul
    .xml
  • $0/chrome/content/rss_delfolder.js
    .js
  • $0/chrome/content/rss_delfolder.xul
    .xml
  • $0/chrome/content/rss_editfolder.js
    .js
  • $0/chrome/content/rss_editfolder.xul
    .xml
  • $0/chrome/content/rss_options.js
    .js
  • $0/chrome/content/rss_options.xul
    .xml
  • $0/chrome/content/runcmd.xml
    .js .xml polyglot
  • $0/chrome/content/scripthost.xml
    .js .xml polyglot
  • $0/chrome/content/search.xml
    .js .xml polyglot
  • $0/chrome/content/skin.xml
    .js .xml polyglot
  • $0/chrome/content/tab_page.htm
    .html .js polyglot
  • $0/chrome/content/tabinclude.xml
    .js .xml polyglot
  • $0/chrome/content/text.xml
    .js .xml polyglot
  • $0/chrome/content/ticker.xml
    .js .xml polyglot
  • $0/chrome/content/ticker_settings.js
    .js
  • $0/chrome/content/ticker_settings.xul
    .xml
  • $0/chrome/content/ticker_xslt.xsl
    .xml
  • $0/chrome/content/toolbar_layout.xml
    .js .xml polyglot
  • $0/chrome/content/toolbaritem.xml
    .js .xml polyglot
  • $0/chrome/content/translat.js
    .js
  • $0/chrome/content/urlstat.xml
    .js .xml polyglot
  • $0/chrome/content/video.xml
    .js .xml polyglot
  • $0/chrome/content/video_player.js
    .js
  • $0/chrome/content/video_player.xul
    .xml
  • $0/chrome/content/weather.xml
    .js .xml polyglot
  • $0/chrome/content/weather_location.js
    .js
  • $0/chrome/content/weather_location.xul
    .xml
  • $0/chrome/content/weather_popup.xul
    .xml
  • $0/chrome/content/weather_settings.js
    .js
  • $0/chrome/content/weather_settings.xul
    .xml
  • $0/chrome/content/wmp.html
    .html
  • $0/chrome/content/wmp.js
    .js
  • $0/chrome/content/wmp.xul
    .xml
  • $0/chrome/content/xsl.xml
    .xml
  • $0/chrome/skin/Bookmarks-item.png
    .png
  • $0/chrome/skin/YahooLogo.png
    .png
  • $0/chrome/skin/aff-close-over.png
    .png
  • $0/chrome/skin/aff-close.png
    .png
  • $0/chrome/skin/aff_green.png
    .png
  • $0/chrome/skin/aff_grey.png
    .png
  • $0/chrome/skin/aff_red.png
    .png
  • $0/chrome/skin/aff_yellow.png
    .png
  • $0/chrome/skin/affiliate.css
  • $0/chrome/skin/arrow-dn.gif
    .gif
  • $0/chrome/skin/arrow-lft.gif
    .gif
  • $0/chrome/skin/arrow-rit.gif
    .gif
  • $0/chrome/skin/audio.png
    .png
  • $0/chrome/skin/autolink-off.png
    .png
  • $0/chrome/skin/autolink-remove.png
    .png
  • $0/chrome/skin/autolink.png
    .png
  • $0/chrome/skin/background.png
    .png
  • $0/chrome/skin/bindings.css
  • $0/chrome/skin/bookmarks.css
  • $0/chrome/skin/bookmarks.png
    .png
  • $0/chrome/skin/bookmarks_a.png
    .png
  • $0/chrome/skin/bubble.css
  • $0/chrome/skin/chevron.css
  • $0/chrome/skin/chevron.png
    .png
  • $0/chrome/skin/combined.png
    .png
  • $0/chrome/skin/fctoolbar.css
  • $0/chrome/skin/feed-icon-small.gif
    .gif
  • $0/chrome/skin/folder.png
    .png
  • $0/chrome/skin/gray03/arrow-w-dn.png
    .png
  • $0/chrome/skin/gray03/btn_max_down.png
    .png
  • $0/chrome/skin/gray03/btn_max_over.png
    .png
  • $0/chrome/skin/gray03/btn_max_up.png
    .png
  • $0/chrome/skin/gray03/btn_min_down.png
    .png
  • $0/chrome/skin/gray03/btn_min_over.png
    .png
  • $0/chrome/skin/gray03/btn_min_up.png
    .png
  • $0/chrome/skin/gray03/btn_pause_down.png
    .png
  • $0/chrome/skin/gray03/btn_pause_over.png
    .png
  • $0/chrome/skin/gray03/btn_pause_up.png
    .png
  • $0/chrome/skin/gray03/btn_play_down.png
    .png
  • $0/chrome/skin/gray03/btn_play_over.png
    .png
  • $0/chrome/skin/gray03/btn_play_up.png
    .png
  • $0/chrome/skin/gray03/btn_playcntrl_over.png
    .png
  • $0/chrome/skin/gray03/btn_playcntrl_up.png
    .png
  • $0/chrome/skin/gray03/btn_stop_down.png
    .png
  • $0/chrome/skin/gray03/btn_stop_over.png
    .png
  • $0/chrome/skin/gray03/btn_stop_up.png
    .png
  • $0/chrome/skin/gray03/btn_volcntrl_over.png
    .png
  • $0/chrome/skin/gray03/btn_volcntrl_up.png
    .png
  • $0/chrome/skin/gray03/equalizer.png
    .gif
  • $0/chrome/skin/gray03/equalizer_loading.png
    .gif
  • $0/chrome/skin/gray03/gray03.css
  • $0/chrome/skin/gray03/leftborder.png
    .png
  • $0/chrome/skin/gray03/playcntrl_bg.png
    .png
  • $0/chrome/skin/gray03/rightborder.png
    .png
  • $0/chrome/skin/gray03/slice_bg.png
    .png
  • $0/chrome/skin/gray03/station.png
    .png
  • $0/chrome/skin/gray03/vol_01.png
    .png
  • $0/chrome/skin/gray03/vol_02.png
    .png
  • $0/chrome/skin/gray03/vol_03.png
    .png
  • $0/chrome/skin/gray03/volslide.png
    .png
  • $0/chrome/skin/gripper.png
    .png
  • $0/chrome/skin/layoutmanager03.png
    .png
  • $0/chrome/skin/mail.png
    .png
  • $0/chrome/skin/mail_refresh.png
    .png
  • $0/chrome/skin/messagebox_emailunread.png
    .png
  • $0/chrome/skin/messagebox_emailunread_na.png
    .png
  • $0/chrome/skin/messagebox_emailunread_rollover.png
    .png
  • $0/chrome/skin/messagebox_messageread.png
    .png
  • $0/chrome/skin/messagebox_messageread_na.png
    .png
  • $0/chrome/skin/messagebox_messageread_rollover.png
    .png
  • $0/chrome/skin/messagebox_refresh.png
    .png
  • $0/chrome/skin/messagebox_refresh_na.png
    .png
  • $0/chrome/skin/messagebox_refresh_rollover.png
    .png
  • $0/chrome/skin/messagebox_trash.png
    .png
  • $0/chrome/skin/messagebox_trash_na.png
    .png
  • $0/chrome/skin/messagebox_trash_rollover.png
    .png
  • $0/chrome/skin/messaging.css
  • $0/chrome/skin/messaging.png
    .png
  • $0/chrome/skin/messagingnew.png
    .png
  • $0/chrome/skin/minus.png
    .png
  • $0/chrome/skin/multirow.css
  • $0/chrome/skin/nomail.png
    .png
  • $0/chrome/skin/orangeFeed.png
    .png
  • $0/chrome/skin/plus.png
    .png
  • $0/chrome/skin/podcast.png
    .png
  • $0/chrome/skin/prefs.css
  • $0/chrome/skin/radio.png
    .png
  • $0/chrome/skin/request_label.css
  • $0/chrome/skin/resize.png
    .png
  • $0/chrome/skin/search.css
  • $0/chrome/skin/search_popup.css
  • $0/chrome/skin/settings03.png
    .png
  • $0/chrome/skin/skin.css
  • $0/chrome/skin/text.css
  • $0/chrome/skin/ticker.css
  • $0/chrome/skin/ticker.htm
    .html .js polyglot
  • $0/chrome/skin/weather/0.png
    .png
  • $0/chrome/skin/weather/1.png
    .png
  • $0/chrome/skin/weather/10.png
    .png
  • $0/chrome/skin/weather/11.png
    .png
  • $0/chrome/skin/weather/12.png
    .png
  • $0/chrome/skin/weather/13.png
    .png
  • $0/chrome/skin/weather/14.png
    .png
  • $0/chrome/skin/weather/15.png
    .png
  • $0/chrome/skin/weather/16.png
    .png
  • $0/chrome/skin/weather/17.png
    .png
  • $0/chrome/skin/weather/18.png
    .png
  • $0/chrome/skin/weather/19.png
    .png
  • $0/chrome/skin/weather/2.png
    .png
  • $0/chrome/skin/weather/20.png
    .png
  • $0/chrome/skin/weather/21.png
    .png
  • $0/chrome/skin/weather/22.png
    .png
  • $0/chrome/skin/weather/23.png
    .png
  • $0/chrome/skin/weather/24.png
    .png
  • $0/chrome/skin/weather/25.png
    .png
  • $0/chrome/skin/weather/26.png
    .png
  • $0/chrome/skin/weather/27.png
    .png
  • $0/chrome/skin/weather/28.png
    .png
  • $0/chrome/skin/weather/29.png
    .png
  • $0/chrome/skin/weather/3.png
    .png
  • $0/chrome/skin/weather/30.png
    .png
  • $0/chrome/skin/weather/31.png
    .png
  • $0/chrome/skin/weather/32.png
    .png
  • $0/chrome/skin/weather/33.png
    .png
  • $0/chrome/skin/weather/34.png
    .png
  • $0/chrome/skin/weather/35.png
    .png
  • $0/chrome/skin/weather/36.png
    .png
  • $0/chrome/skin/weather/37.png
    .png
  • $0/chrome/skin/weather/38.png
    .png
  • $0/chrome/skin/weather/39.png
    .png
  • $0/chrome/skin/weather/4.png
    .png
  • $0/chrome/skin/weather/40.png
    .png
  • $0/chrome/skin/weather/41.png
    .png
  • $0/chrome/skin/weather/42.png
    .png
  • $0/chrome/skin/weather/43.png
    .png
  • $0/chrome/skin/weather/44.png
    .png
  • $0/chrome/skin/weather/45.png
    .png
  • $0/chrome/skin/weather/46.png
    .png
  • $0/chrome/skin/weather/47.png
    .png
  • $0/chrome/skin/weather/5.png
    .png
  • $0/chrome/skin/weather/6.png
    .png
  • $0/chrome/skin/weather/7.png
    .png
  • $0/chrome/skin/weather/8.png
    .png
  • $0/chrome/skin/weather/9.png
    .png
  • $0/chrome/skin/weather/na.png
    .png
  • $0/chrome/skin/weather_popup.css
  • $0/chrome/skin/web.png
    .png
  • $0/components/FCTB.js
    .js
  • $0/components/IFCTBAutoComplete.js
    .js
  • $0/components/nsIFCTBAutocomplete.xpt
  • $0/install.rdf
    .xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    7458f96eb10904198d988c72ce690084


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections