General

  • Target

    82ce61ab20ffbe1d7c9289247ad26526_JaffaCakes118

  • Size

    3.8MB

  • MD5

    82ce61ab20ffbe1d7c9289247ad26526

  • SHA1

    220b080221b292a10a3918b43976cc3d377ebc3c

  • SHA256

    eb372bda73475ae4afa320028c5bb990e7ac44c927ff6c376a4b47eb86e1ce38

  • SHA512

    44c782c13ec30c40a488739b73dca9490fa7578006970bdddf3389a78a5c00c5b73950994bc723b951d966babeb1d916b3ebfc2bc9097985b2e9b55b15f05eb5

  • SSDEEP

    98304:Impf+gOlIkzhiGvrmqsU1AL1bQO7ezjirBqJOwBnB7HlcoPO:Im5OFzs2rH9zjirBqTBDlhO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 82ce61ab20ffbe1d7c9289247ad26526_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Options.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Hetman Uneraser.chm
    .chm
  • Hetman Uneraser.exe
    .exe windows:4 windows x86 arch:x86

    f433e7fcc51e68080022754836705744


    Headers

    Imports

    Sections

  • Language/Deutsch.lng
  • Language/English.lng
  • Language/French.lng
  • Language/Italian.lng
  • Language/Russian.lng
  • RawIO16.bin
  • RawIO32.bin
    .dll windows:4 windows x86 arch:x86

    eeeb977fae61ae4ecd19b8c8b7519a71


    Headers

    Imports

    Exports

    Sections

  • Resources/DSKImageMenu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e84f16affa7bf83c9771fced0d117219


    Headers

    Imports

    Exports

    Sections

  • Resources/DiskMenu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3d972e4d41f4730ef41f8224ad8cf366


    Headers

    Imports

    Exports

    Sections

  • Resources/FileExt.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • Resources/StarBurn.dll
    .dll windows:6 windows x86 arch:x86

    ea720829252e09062268736bb8fda232


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Settings.ini
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp