General

  • Target

    76a0b6dc7b914e9af506f6ab08ea292a_JaffaCakes118

  • Size

    1.1MB

  • MD5

    76a0b6dc7b914e9af506f6ab08ea292a

  • SHA1

    054ff961830175e84c6dffafbd8ee3fd4cd3b61d

  • SHA256

    d9411aa314156ded8243d0bf8a9457124b77c859114fef624f43ef26deb14d2b

  • SHA512

    94a6016436b30af89f9509398bd80f238ae97fd78cc3a06c96862e16d9e4c0c77c5bac7624c6d93c885d45652cfd2e8cc8e3553973ee07278ace64dcf9066b02

  • SSDEEP

    24576:lVtrduQP4ZFfuPAomOHQUH8VW0uQdtXKQuJi6xwF+3vAL+8FlIa:lvduQkQ6OzHauQvKQuJPGFcV8FSa

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 76a0b6dc7b914e9af506f6ab08ea292a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/HTTPHelper.dll
    .dll windows:4 windows x86 arch:x86

    a9960fd92815992f24ea126be19cc2d2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    33d5176d1fca5bb016a29a7d9196b3b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • ClearHist.exe
    .exe windows:5 windows x86 arch:x86

    5bd3155b2b3e9b361cb382cf6bf393f8


    Code Sign

    Headers

    Imports

    Sections

  • HttpHandle302.dll
    .dll windows:5 windows x86 arch:x86

    8db506f6784af0bc7756691f8d237889


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IE8GuardWorkaround.exe
    .exe windows:5 windows x86 arch:x86

    8e8839560ab4345575392cb7dea3831a


    Code Sign

    Headers

    Imports

    Sections

  • Prefs.xml
    .vbs .xml
  • ShopAtHomeUninstallA.exe
    .exe windows:4 windows x86 arch:x86

    e7d4c33538f236789b7d3d577b7b4505


    Code Sign

    Headers

    Imports

    Sections

  • TbCommonUtils.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    9a7e5a5b2eca9091359ea0a5999f7447


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tbcore3U.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    f74801141397d8dc8c3f9ff0faa80d4f


    Headers

    Imports

    Exports

    Sections