General

  • Target

    83682f072440a2403e9ba0d092a71e13_JaffaCakes118

  • Size

    1.9MB

  • MD5

    83682f072440a2403e9ba0d092a71e13

  • SHA1

    72dfd1efd0e19bed98f754a883dc8262c6c690d4

  • SHA256

    89d0b7e714a47388856601066cf50b10e0ddfffb30bd15d5fbd2249cd0d58f6f

  • SHA512

    1b9759d8367f7db26324a265fdd11bb961537148489a099bccde584e0d8fe108b750a8aa9d01c1769014487d425076a0fd6850f94b1a0d8f386e496d734a82a9

  • SSDEEP

    49152:wqj/Tdm/UBg/jDk0aWr0K/Ubj6BODV0ZF0Ss:r7dm/UBgbDkqR+28V0ZFo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 83682f072440a2403e9ba0d092a71e13_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Licence.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/Photos/01.png
    .png
  • $TEMP/XL7InstallUI/Photos/02.png
    .png
  • $TEMP/XL7InstallUI/Photos/03.png
    .png
  • $TEMP/XL7InstallUI/Photos/04.png
    .png
  • $TEMP/XL7InstallUI/Photos/05.png
    .png
  • $TEMP/XL7InstallUI/Photos/Arrow.png
    .png
  • $TEMP/XL7InstallUI/Photos/Close.png
    .png
  • $TEMP/XL7InstallUI/Photos/Folder.png
    .png
  • $TEMP/XL7InstallUI/Photos/GeneralPro.png
    .png
  • $TEMP/XL7InstallUI/Photos/Light.png
    .png
  • $TEMP/XL7InstallUI/Photos/MessageBack.png
    .png
  • $TEMP/XL7InstallUI/Photos/ProBlue.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduBottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomBackOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/button.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishMiddleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/font.png
    .png
  • $TEMP/XL7InstallUI/Photos/frame.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon2.png
    .png
  • $TEMP/XL7InstallUI/Photos/middleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/select.png
    .png
  • $TEMP/XL7InstallUI/Photos/setup.ico
  • $TEMP/XL7InstallUI/Photos/title.ico
  • $TEMP/XL7InstallUI/Photos/tooltip.png
    .png
  • $TEMP/XL7InstallUI/Photos/upOver.png
    .png
  • $TEMP/XL7InstallUI/XL7InstallUI.dll
    .dll windows:4 windows x86 arch:x86

    19088bab341d1c07756028c82dec588b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    afca6259dede277efebcc3c21992f584


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    805843be7a20a712ee0fb0380602f744


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections

  • Program/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    afca6259dede277efebcc3c21992f584


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    805843be7a20a712ee0fb0380602f744


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • Program/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • Program/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • Program/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Program/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Program/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections