General

  • Target

    6ade4e0604a79d30f0b74c8a227668f4_JaffaCakes118

  • Size

    4.4MB

  • MD5

    6ade4e0604a79d30f0b74c8a227668f4

  • SHA1

    22b93d4fcbef175e598d0c74f9a3173dd016954c

  • SHA256

    758bae58b737f79a407c29f37486346e97b167d26a863b85adf25e7313264aed

  • SHA512

    f2df081bea9be9758c9338af4c99237a288e3d463c0b50fba25b3191458585531ad723567a34b5e99c7828d89d6f65a32cba44bae9ebc78ab2a1a595f4bdd8f0

  • SSDEEP

    98304:4J0fNeTmZQOTJRQiugq+aho0qtJLaG6znax6IUW+XzdzscYhn6:k0fNeSDT/QVu0SW3naxKXJzxYh6

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ade4e0604a79d30f0b74c8a227668f4_JaffaCakes118
    .rar
  • SCPDF3/Advanced_0.bmp
  • SCPDF3/Advanced_1.bmp
  • SCPDF3/Advanced_2.bmp
  • SCPDF3/Advanced_3.bmp
  • SCPDF3/Advanced_4.bmp
  • SCPDF3/ConverterCore.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SCPDF3/ConverterCore_bak.dll
    .dll windows:4 windows x86 arch:x86

    6349251f86786c1fef4c262fb2ac1e74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/Danish.xml
    .xml
  • SCPDF3/DocFlt.flt
    .dll windows:4 windows x86 arch:x86

    fb52456768fd1428b98dfebded1480d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/Interop.SolidConverterDllLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SCPDF3/Italiano.xml
    .xml
  • SCPDF3/LanguageSchema.xml
    .xml
  • SCPDF3/MFC71LU.DLL
    .dll windows:4 windows x86 arch:x86

    7af1f999a5de4e266fb85b49a9339c36


    Headers

    Imports

    Sections

  • SCPDF3/MSLUP71.dll
    .dll windows:4 windows x86 arch:x86

    3a77275ff0f9b4a506941239df88593b


    Headers

    Imports

    Exports

    Sections

  • SCPDF3/MSLUR71.dll
    .dll windows:4 windows x86 arch:x86

    30958a6c4166bc91a664273e48d80281


    Headers

    Imports

    Exports

    Sections

  • SCPDF3/Options.xml
    .xml
  • SCPDF3/PdfFlt.flt
    .dll windows:4 windows x86 arch:x86

    0432628ed3c4adbc8c50513ed2afe995


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/PdfFontMapper.txt
  • SCPDF3/PrinterSetup2.dll
    .dll windows:4 windows x86 arch:x86

    8595ca5cd43f1e9f5b7a1187e2cf5478


    Headers

    Imports

    Exports

    Sections

  • SCPDF3/RtfFlt.flt
    .dll windows:4 windows x86 arch:x86

    88fa17f6d78e199c75dfeb40a78b2fa2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/SCPDFCreator.dll
    .dll windows:4 windows x86 arch:x86

    08aea11894cfda99ce11320fcaed2ca6


    Headers

    Imports

    Exports

    Sections

  • SCPDF3/SCPDFCreator.exe
    .exe windows:4 windows x86 arch:x86

    964670ed6b41d15a61c09b5b88b911d0


    Headers

    Imports

    Sections

  • SCPDF3/SolidConverterDll.manifest
    .xml
  • SCPDF3/SolidConverterPDF.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    851bbc8d25f7c416d6933a2d5fbba0ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/SolidConverterPDF.exe
    .exe windows:4 windows x86 arch:x86

    09e1b3d6822a1207fbe842a1baebe1d4


    Code Sign

    Headers

    Imports

    Sections

  • SCPDF3/SolidCore.dll
    .dll windows:4 windows x86 arch:x86

    d2acec66866ef7f3a9c2e3082433b7e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/SolidHost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SCPDF3/SolidHost.exe.config
  • SCPDF3/SolidHost.exe.manifest
    .xml
  • SCPDF3/SolidPDFWrapper.DLL
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SCPDF3/SolidPdfService.exe
    .exe windows:4 windows x86 arch:x86

    be6cb15b978bd7a449286914d59b27ca


    Headers

    Imports

    Sections

  • SCPDF3/SpmlFlt.flt
    .dll windows:4 windows x86 arch:x86

    91eb5c0a26194b65785aaf00526437a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/VoyagerSoft, LLC License Agreement.pdf
    .pdf
    • http://www.soliddocuments.com

    • http://www.soliddocuments.com/license.htm.

  • SCPDF3/WdmlFlt.flt
    .dll windows:4 windows x86 arch:x86

    23ae0e3785016a7dd08d1f1aa6094824


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/characterspacing_0.png
    .png
  • SCPDF3/characterspacing_1.png
    .png
  • SCPDF3/chinese_simplified.xml
    .xml
  • SCPDF3/chinese_traditional.xml
    .xml
  • SCPDF3/commonui.xml
    .xml
  • SCPDF3/config.dat
  • SCPDF3/dbCore.dll
    .dll windows:4 windows x86 arch:x86

    2a2a58273698c2d9c039a61e30911ece


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/detecttables_0.png
    .png
  • SCPDF3/detecttables_1.png
    .png
  • SCPDF3/docs/en/credits.html
    .html
  • SCPDF3/docs/en/index.htm
    .html
  • SCPDF3/docs/images/options.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_acrobatmenu.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_backbtn.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_conversionprogress.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_convert3.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_convertbtn.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_convertpages.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_createpdf.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_extractfinish.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_extractimageformat.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_extractpagerange.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_fileopen.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_icon.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_images.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_lastbtn.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_masthead.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_menu.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_menu2.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_nextbtn.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_openpdf.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_optionsdialog.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_pages.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_preservepdf.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_printmenu.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_rightclick.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_wordbuttons.png
    .png
  • SCPDF3/docs/images/solidconverterpdf_wordmenu.png
    .png
  • SCPDF3/docs/style_pdf.css
  • SCPDF3/dutch.xml
    .xml
  • SCPDF3/english.xml
    .xml
  • SCPDF3/evalsplash.png
    .png
  • SCPDF3/french.xml
    .xml
  • SCPDF3/german.xml
    .xml
  • SCPDF3/hspace.png
    .png
  • SCPDF3/i386/solid2.pcd
  • SCPDF3/i386/solidgraphics2.dll
    .dll windows:5 windows x86 arch:x86

    7c8bcf5d29f18e5aea96f82f8853fa7c


    Headers

    Imports

    Exports

    Sections

  • SCPDF3/i386/solidprinter2.inf
  • SCPDF3/i386/solidui2.dll
    .dll windows:5 windows x86 arch:x86

    59223a6805e2f47fffbc0520e73bb4ad


    Headers

    Imports

    Exports

    Sections

  • SCPDF3/i386/solidui2.hlp
  • SCPDF3/imagerecovery_0.png
    .png
  • SCPDF3/imagerecovery_1.png
    .png
  • SCPDF3/imagerecovery_2.png
    .png
  • SCPDF3/imagerecovery_3.png
    .png
  • SCPDF3/imagerecovery_4.png
    .png
  • SCPDF3/imagerecovery_5.png
    .png
  • SCPDF3/japanese.xml
    .xml
  • SCPDF3/korean.xml
    .xml
  • SCPDF3/leftbanner.png
    .png
  • SCPDF3/norwegian.xml
    .xml
  • SCPDF3/pagerange_0.png
    .png
  • SCPDF3/pagerange_1.png
    .png
  • SCPDF3/panel.png
    .png
  • SCPDF3/polish.xml
    .xml
  • SCPDF3/portuguese.xml
    .xml
  • SCPDF3/reconstruction_0.png
    .png
  • SCPDF3/reconstruction_1.png
    .png
  • SCPDF3/reconstruction_2.png
    .png
  • SCPDF3/reconstruction_3.png
    .png
  • SCPDF3/reconstruction_4.png
    .png
  • SCPDF3/russian.xml
    .xml
  • SCPDF3/spanish.xml
    .xml
  • SCPDF3/splash.png
    .png
  • SCPDF3/swedish.xml
    .xml
  • SCPDF3/topbanner.png
    .png
  • SCPDF3/txtFlt.flt
    .dll windows:4 windows x86 arch:x86

    05e5fa56b41dd6ce749ed8e7c55444fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/ui.xml
    .xml
  • SCPDF3/ui.xsd
    .xml
  • SCPDF3/unicows.dll
    .dll windows:5 windows x86 arch:x86

    263b6aa606212e61f04bf325434becf4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SCPDF3/vschinese_simplified.xml
    .xml
  • SCPDF3/vschinese_traditional.xml
    .xml
  • SCPDF3/vsdanish.xml
    .xml
  • SCPDF3/vsdutch.xml
    .xml
  • SCPDF3/vsenglish.xml
    .xml
  • SCPDF3/vsfrench.xml
    .xml
  • SCPDF3/vsgerman.xml
    .xml
  • SCPDF3/vsitaliano.xml
  • SCPDF3/vsjapanese.xml
    .xml
  • SCPDF3/vskorean.xml
    .xml
  • SCPDF3/vsnorwegian.xml
    .xml
  • SCPDF3/vspace.png
    .png
  • SCPDF3/vspolish.xml
    .xml
  • SCPDF3/vsportuguese.xml
    .xml
  • SCPDF3/vsrussian.xml
    .xml
  • SCPDF3/vsspanish.xml
    .xml
  • SCPDF3/vsswedish.xml
    .xml
  • SCPDF3/新云软件.url
    .url
  • SCPDF3/注册文件.txt