General

  • Target

    8c396fbdacce214de2e86354a77350d2_JaffaCakes118

  • Size

    1.9MB

  • MD5

    8c396fbdacce214de2e86354a77350d2

  • SHA1

    dba514af18c0ed0b190f16f8b9da2d137f47a219

  • SHA256

    b59e1e75d9647357e686f077470054688d2b130e08dfc7ab9763ae22b83b2109

  • SHA512

    5b30016234a2e96088192568d2b623a8bf5b2d8d1c6c2c4a460af313ae8369c3542528b8a69abe51f62c82493e953b7c010f064fff23508a033b39d595526f39

  • SSDEEP

    49152:2noEndaVYgP1icZSXh1i23k3wt3hXPqYTyIxHiu9z6SWXUwN:2nFneP1iAS/l3bbSCyIx76

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c396fbdacce214de2e86354a77350d2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    c4abca779ba23fbd93593c9489cbffe6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ext.dll
    .dll windows:4 windows x86 arch:x86

    208736198f6ea4d628a3178f18bd8ff3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/lastpage.ini
  • $PLUGINSDIR/update.ini
  • $TEMP/pin.vbs
    .vbs
  • $_7_.exe
    .exe windows:4 windows x86 arch:x86

    861188026404325a2dc79a11381e2e22


    Headers

    Imports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • MFC71ENU.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • database.dat
    .zip
  • license.txt
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    612c7a5408aa8eda54df52437b2486de


    Headers

    Imports

    Sections