General

  • Target

    8779e74543b1cf1cc24fc24f9244b305_JaffaCakes118

  • Size

    1.1MB

  • MD5

    8779e74543b1cf1cc24fc24f9244b305

  • SHA1

    1d20e75f75fd5160e41d33604dc939d347912355

  • SHA256

    aea65a045e9569d57ac1df4fba44f66150545863d4b5a84e51d9cf82cc578445

  • SHA512

    cb0fa817758d54c2831c78aec126a9eb8b9025a600ee372dbc8b357b1542a54eeb973b31c644b02ffb615d19897cdba609738e2867a301efe24426960d321317

  • SSDEEP

    24576:JsxVhYitHd/uIMPfIlCko7rKcYPmD7QrZJOAvFVA4In+EU7awB9Plc:cVySZuZPQmbYPq7UiAvFa4I+p7aOc

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 8779e74543b1cf1cc24fc24f9244b305_JaffaCakes118
    .rar
  • attsetup.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Confirm.ini
  • $PLUGINSDIR/Finish.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.ini
  • $PLUGINSDIR/btmimg.bmp
  • $PLUGINSDIR/header.bmp
  • $PLUGINSDIR/ioC.ini
  • $PLUGINSDIR/ioC2.ini
  • $PLUGINSDIR/isWelcome.ini
  • $PLUGINSDIR/leftimg.bmp
  • $PLUGINSDIR/splash.bmp
  • 3d/bench.res
  • 3d/face_indicies.dat
  • 3d/fur2.dds
  • 3d/normals.dat
  • 3d/rain2.dds
  • 3d/vertices.dat
  • Database/Advanced D3D Tweaks.dtb
  • Database/Advanced OGL Tweaks.dtb
  • Database/CCC Mode Switch.dtb
  • Database/Compatibility Tweaks.dtb
  • Database/Display Tweaks.dtb
  • Database/Multi Thread Support.dtb
  • Database/New AA and AF Methods.dtb
  • Database/Video Tweaks.dtb
  • Database/Vista Avivo.dtb
  • Database/readme.txt
  • License.rtf
    .rtf
  • Presets/OGL Balanced.reg
  • Presets/OGL Max Quality.reg
  • Presets/OGL Max Speed.reg
  • Presets/d3d Balanced.reg
  • Presets/d3d Max Quality.reg
  • Presets/d3d Max Speed.reg
  • Smart Shaders/Blur.pss
  • Smart Shaders/Ghost.pss
  • Smart Shaders/HDRish-Lite.pss
  • Smart Shaders/HDRish.pss
  • Smart Shaders/Sharpen.pss
  • WhatsNew.txt
  • atitray.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • atitray.hlp
  • atitray.ini
  • atitray.sys
    .sys windows:5 windows x86 arch:x86

    38a7cd7c6e6d011eba6094edd5056880


    Code Sign

    Headers

    Imports

    Sections

  • atitray64.sys
    .sys windows:5 windows x64 arch:x64

    8eed4fa217e1012af389c63ca9ba78dc


    Code Sign

    Headers

    Imports

    Sections

  • attext.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0947436dc36820b428be7e7a7d53501b


    Headers

    Imports

    Exports

    Sections

  • attsio.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • guru3d.url
  • kbdhook.dll
    .dll windows:4 windows x86 arch:x86

    b86e049fdf9df45057132811b8059a77


    Headers

    Imports

    Exports

    Sections

  • lng/Belarussian.ini
  • lng/Finnish.ini
  • lng/German.ini
  • lng/Japanese.ini
  • lng/Polish.ini
  • lng/Portugues_BR.ini
  • lng/Romanian.ini
  • lng/Russian.ini
  • lng/Simplified Chinese.ini
  • lng/Spanish.ini
  • lng/Ukrainian.ini
  • lng/czech.ini
  • lng/english.ini
  • lng/french.ini
  • lng/italian.ini
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • plugins.url
  • plugins/api/delphi/example/plugin1/plugin1.dpr
  • plugins/api/delphi/example/plugin1/plugin1.res
  • plugins/api/delphi/plugins.pas
    .js
  • plugins/api/readme.txt
  • plugins/api/vc++/example/cpuload/CpuUsage.cpp
  • plugins/api/vc++/example/cpuload/CpuUsage.h
  • plugins/api/vc++/example/cpuload/PerfCounters.h
  • plugins/api/vc++/example/cpuload/StdAfx.h
  • plugins/api/vc++/example/cpuload/cpuload.cpp
  • plugins/api/vc++/example/cpuload/cpuload.def
  • plugins/api/vc++/example/cpuload/cpuload.dsp
  • plugins/api/vc++/example/cpuload/cpuload.dsw
  • plugins/api/vc++/example/cpuload/cpuload.rc
  • plugins/api/vc++/example/cpuload/icon1.ico
  • plugins/api/vc++/example/cpuload/icon10.ico
  • plugins/api/vc++/example/cpuload/icon11.ico
  • plugins/api/vc++/example/cpuload/icon12.ico
  • plugins/api/vc++/example/cpuload/icon13.ico
  • plugins/api/vc++/example/cpuload/icon14.ico
  • plugins/api/vc++/example/cpuload/icon15.ico
  • plugins/api/vc++/example/cpuload/icon2.ico
  • plugins/api/vc++/example/cpuload/icon3.ico
  • plugins/api/vc++/example/cpuload/icon4.ico
  • plugins/api/vc++/example/cpuload/icon5.ico
  • plugins/api/vc++/example/cpuload/icon6.ico
  • plugins/api/vc++/example/cpuload/icon7.ico
  • plugins/api/vc++/example/cpuload/icon8.ico
  • plugins/api/vc++/example/cpuload/icon9.ico
  • plugins/api/vc++/example/cpuload/resource.h
  • plugins/api/vc++/example/mongraphs/StdAfx.cpp
  • plugins/api/vc++/example/mongraphs/StdAfx.h
  • plugins/api/vc++/example/mongraphs/mongraphsexample.cpp
  • plugins/api/vc++/example/mongraphs/mongraphsexample.def
  • plugins/api/vc++/example/mongraphs/mongraphsexample.dep
  • plugins/api/vc++/example/mongraphs/mongraphsexample.dsp
  • plugins/api/vc++/example/mongraphs/mongraphsexample.dsw
  • plugins/api/vc++/example/mongraphs/mongraphsexample.mak
  • plugins/api/vc++/example/mongraphs/mongraphsexample.rc
  • plugins/api/vc++/example/mongraphs/resource.h
  • plugins/api/vc++/example/osdtime/StdAfx.cpp
  • plugins/api/vc++/example/osdtime/StdAfx.h
  • plugins/api/vc++/example/osdtime/osdtime.cpp
  • plugins/api/vc++/example/osdtime/osdtime.def
  • plugins/api/vc++/example/osdtime/osdtime.dsp
  • plugins/api/vc++/example/osdtime/osdtime.dsw
  • plugins/api/vc++/example/osdtime/osdtime.mak
  • plugins/api/vc++/example/osdtime/osdtime.rc
  • plugins/api/vc++/example/osdtime/resource.h
  • plugins/api/vc++/example/pciinfo/StdAfx.cpp
  • plugins/api/vc++/example/pciinfo/StdAfx.h
  • plugins/api/vc++/example/pciinfo/pciinfo.cpp
  • plugins/api/vc++/example/pciinfo/pciinfo.def
  • plugins/api/vc++/example/pciinfo/pciinfo.dsp
  • plugins/api/vc++/example/pciinfo/pciinfo.dsw
  • plugins/api/vc++/example/pciinfo/resource.h
  • plugins/api/vc++/example/pciinfo/resources.rc
  • plugins/api/vc++/plugins.h
  • plugins/cpuload.dll
    .dll windows:4 windows x86 arch:x86

    7ace9cc1f983fc032eca6d4a232c0824


    Headers

    Imports

    Exports

    Sections

  • plugins/hddtemp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/mg_hdddtemp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/mg_xvlt.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/mongraphsexample.dll
    .dll windows:4 windows x86 arch:x86

    11efd8b2869f5c85b6be3ae234c1f411


    Headers

    Imports

    Exports

    Sections

  • plugins/osdminfo.dll
    .dll windows:4 windows x86 arch:x86

    6111c6ed7b4fe992a84d06710e617b75


    Headers

    Imports

    Exports

    Sections

  • plugins/osdtime.dll
    .dll windows:4 windows x86 arch:x86

    86c6364f5727dbe8cc2ceff7772b4db0


    Headers

    Imports

    Exports

    Sections

  • plugins/pciinfo.dll
    .dll windows:4 windows x86 arch:x86

    3ac0bb48a88649af9990fd0e3073c52a


    Headers

    Imports

    Exports

    Sections

  • plugins/pciset.dll
    .dll windows:4 windows x86 arch:x86

    ba45d2fccb6d3c90b8d6ef186fa8d824


    Headers

    Imports

    Exports

    Sections

  • plugins/shared memory/Delphi/attshmem.dof
  • plugins/shared memory/Delphi/attshmem.dpr
  • plugins/shared memory/Delphi/attshmem.res
  • plugins/shared memory/Delphi/uMain.dfm
  • plugins/shared memory/Delphi/uMain.pas
  • plugins/shared memory/VC/StdAfx.cpp
  • plugins/shared memory/VC/StdAfx.h
  • plugins/shared memory/VC/attsharedmem.clw
  • plugins/shared memory/VC/attsharedmem.cpp
  • plugins/shared memory/VC/attsharedmem.dsp
  • plugins/shared memory/VC/attsharedmem.dsw
  • plugins/shared memory/VC/attsharedmem.h
  • plugins/shared memory/VC/attsharedmem.rc
  • plugins/shared memory/VC/attsharedmemDlg.cpp
  • plugins/shared memory/VC/attsharedmemDlg.h
  • plugins/shared memory/VC/res/attsharedmem.ico
  • plugins/shared memory/VC/res/attsharedmem.rc2
  • plugins/shared memory/VC/resource.h
  • plugins/shared memory/readme.txt
  • plugins/shared memory/uninstall.exe.nsis
  • radeon.url
  • raphook.dll
    .dll windows:4 windows x86 arch:x86

    fcde7ea707e266aaa2de54907698ed77


    Headers

    Imports

    Exports

    Sections

  • readme.htm
    .html
  • srvinst.exe
    .exe windows:4 windows x86 arch:x86

    3c385122a34d67d1ee34b2cc11a0b40f


    Code Sign

    Headers

    Imports

    Sections

  • support.dll
    .dll windows:4 windows x86 arch:x86

    f5c6a44d6eec991cbebd2411151cbb5d


    Headers

    Imports

    Exports

    Sections

  • 安装说明.url
    .url