General

  • Target

    841ecfe55d8eeabb6a7bcc980c970921_JaffaCakes118

  • Size

    2.6MB

  • MD5

    841ecfe55d8eeabb6a7bcc980c970921

  • SHA1

    aee45cbface92b5a1d026bab504e1a4486e168b9

  • SHA256

    1e854a8ed0e62d53e9f0d8be448e54087b2f410e8a2a0e20daa708c7f7f9f5eb

  • SHA512

    bedf42d8f3a1bc5ab8ce18f82eb134ce7d9bfd944b431f7fad142bfbfee091a8f2e4c483132141d96ec801ded467be1a3d8c7c10702604b69391790e1d8b7c48

  • SSDEEP

    49152:TcuagVEejkzkw2ZlwMfSzLDAFPTxlXyOW2x7Cms16whlh+qHt70q/uM2g:ouageejkHowNDUPsC7TsvlEsp/uMf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 841ecfe55d8eeabb6a7bcc980c970921_JaffaCakes118
    .rar
  • battery-optimizer-3-0-5-20-multi-win.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/ReviverSoft/Battery Optimizer/Language/BatteryOptimizer.exe
    .exe windows:5 windows x64 arch:x64

    9d81e7e83a3a7588308b24c1ad0d0ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/ReviverSoft/Battery Optimizer/Language/BatteryOptimizerUpdater.exe
    .exe windows:5 windows x64 arch:x64

    9efdf87239bb826afe3c5135532783b2


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/ReviverSoft/Battery Optimizer/Language/Danish.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/Dutch.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/English.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/French.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/German.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/Italian.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/Russian.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/Spanish.xml
    .xml
  • $APPDATA/ReviverSoft/Battery Optimizer/Language/Turkish.xml
    .xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/custom.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    951cc7238d8fd0eb64d5b7327ab08456


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsAdditionalControls.dll
    .dll windows:5 windows x86 arch:x86

    a0bec18c3d65d223f92d761e494a0051


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsEnvVariables.dll
    .dll windows:5 windows x86 arch:x86

    211e16547fae1d5f51bf909bfc524385


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    19d21edc9b11cef0888669c10a8ec116


    Headers

    Imports

    Exports

    Sections

  • BatteryOptimizer.exe
    .exe windows:5 windows x86 arch:x86

    e8ece855ab5902a35c38c0f155757a03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BatteryOptimizerUpdater.exe
    .exe windows:5 windows x86 arch:x86

    d11eaac09d5abe3cac93542b7ca1a349


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsEnvVariables.dll
    .dll windows:5 windows x86 arch:x86

    211e16547fae1d5f51bf909bfc524385


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    19d21edc9b11cef0888669c10a8ec116


    Headers

    Imports

    Exports

    Sections

  • defaults/Danish.xml
    .xml
  • defaults/Dutch.xml
    .xml
  • defaults/Dutch1
    .png
  • defaults/Dutch2
    .png
  • defaults/English.xml
    .xml
  • defaults/English1
    .png
  • defaults/English2
    .png
  • defaults/French.xml
    .xml
  • defaults/French1
    .png
  • defaults/French2
    .png
  • defaults/German.xml
    .xml
  • defaults/German1
    .png
  • defaults/German2
    .png
  • defaults/Italian.xml
    .xml
  • defaults/Italian1
    .png
  • defaults/Italian2
    .png
  • defaults/Russian.xml
    .xml
  • defaults/Russian1
    .png
  • defaults/Russian2
    .png
  • defaults/Spanish.xml
    .xml
  • defaults/Spanish1
    .png
  • defaults/Spanish2
    .png
  • defaults/Turkish.xml
    .xml
  • defaults/Turkish1
    .png
  • defaults/Turkish2
    .png