General

  • Target

    8c8414da3c785615a1faf053f8aa65eb_JaffaCakes118

  • Size

    6.4MB

  • MD5

    8c8414da3c785615a1faf053f8aa65eb

  • SHA1

    fca702c9901d181d6811329d612288681c31c148

  • SHA256

    fe09425c244bbab9f2b29421f577a2b03c150a9da2b7e1ef7b24f7d407b1777d

  • SHA512

    ad1bb6f4656be43bf8c22c866c8069f505b7bf1103687f22424918e8433701e440b5b35eaf6a72a29c632d8df2f7ef5b01bccd7dbdce789cc487559ad8653219

  • SSDEEP

    196608:zS36uhbdYB5pODsjYpLwVDP+hgk4EvcK6:zU6ObdYBLOIjCLq+j4EI

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c8414da3c785615a1faf053f8aa65eb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    8fbbf807b5bf33729f0092d4b8c483c4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2be79521ab92f834267b9728a9762af6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Autochartist_CITIFX.cfg
  • Autochartist_CITIFX.exe
    .exe windows:4 windows x86 arch:x86

    736aa036e7836d711916c201bb5fe9b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CITIFX.ico
  • CITIFX.ssk
  • Dictionary_Korean.sib
  • Dictionary_Portuguese.sib
  • Dictionary_Russian.sib
  • Dictionary_Simplified Chinese.sib
  • Dictionary_Traditional Chinese.sib
  • FibonacciPatternID1.bmp
  • FibonacciPatternID16.bmp
  • FibonacciPatternID2.bmp
  • FibonacciPatternID32.bmp
  • FibonacciPatternID4.bmp
  • FibonacciPatternID8.bmp
  • GridPackc2009.bpl
    .dll windows:4 windows x86 arch:x86

    9df71015fd937901d082f5261c59d05d


    Headers

    Imports

    Exports

    Sections

  • IndyCore120.bpl
    .dll windows:5 windows x86 arch:x86

    038553e1a871e4c4580e26872c007844


    Headers

    Imports

    Exports

    Sections

  • IndyProtocols120.bpl
    .dll windows:5 windows x86 arch:x86

    776b2008264cbcb02fb559f353bbd1cd


    Headers

    Imports

    Exports

    Sections

  • IndySystem120.bpl
    .dll windows:5 windows x86 arch:x86

    a97d7736846f3f998a0a13cffb2e7ebd


    Headers

    Imports

    Exports

    Sections

  • Lang_English_Menu.ico
  • Lang_English_SubMenu.bmp
  • Lang_Korean_Menu.ico
  • Lang_Korean_SubMenu.bmp
  • Lang_Portuguese_Menu.ico
  • Lang_Portuguese_SubMenu.bmp
  • Lang_Russian_Menu.ico
  • Lang_Russian_SubMenu.bmp
  • Lang_Simplified Chinese_Menu.ico
  • Lang_Simplified Chinese_SubMenu.bmp
  • Lang_Traditional Chinese_Menu.ico
  • Lang_Traditional Chinese_SubMenu.bmp
  • PatternID1.bmp
  • PatternID1024.bmp
  • PatternID128.bmp
  • PatternID16.bmp
  • PatternID16384.bmp
  • PatternID2.bmp
  • PatternID2048.bmp
  • PatternID256.bmp
  • PatternID32.bmp
  • PatternID32768.bmp
  • PatternID4.bmp
  • PatternID4096.bmp
  • PatternID512.bmp
  • PatternID64.bmp
  • PatternID8.bmp
  • PatternID8192.bmp
  • TsiLang_2009r.bpl
    .dll windows:5 windows x86 arch:x86

    0fdec3d9aafe54d805b97036fce1e645


    Headers

    Imports

    Exports

    Sections

  • UpdateLang.ini
  • bcbie120.bpl
    .dll windows:4 windows x86 arch:x86

    3978b72c61b914fab10c937b5da8ce32


    Headers

    Imports

    Exports

    Sections

  • bcbsmp120.bpl
    .dll windows:4 windows x86 arch:x86

    1ced8573a8fd366c4924ef2bf7c4b3ff


    Headers

    Imports

    Exports

    Sections

  • borlndmm.dll
    .dll windows:4 windows x86 arch:x86

    bc4502596293aa591bcb76aafb2515c4


    Headers

    Imports

    Exports

    Sections

  • cc3290mt.dll
    .dll windows:4 windows x86 arch:x86

    51b001c011c0905c0ffa39842cefeafb


    Headers

    Imports

    Exports

    Sections

  • dbrtl120.bpl
    .dll windows:5 windows x86 arch:x86

    b9b30e4eeba5dc8979257cb518ccea5d


    Headers

    Imports

    Exports

    Sections

  • indy100.bpl
    .dll windows:4 windows x86 arch:x86

    648494ff8e489190fb25746599676aa8


    Headers

    Imports

    Exports

    Sections

  • indy120.bpl
    .dll windows:5 windows x86 arch:x86

    9a4d6a2af4bc451a8b39b716ba69be7b


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    0a6823281e71f6b2fe5271627d3c16ba


    Headers

    Imports

    Exports

    Sections

  • newchartpattern.wav
  • rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    fac06cfe16c2052ff34e27439885ff00


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    aeecbb2b0810c08fc15a587ed971b4b6


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • update_CITIFX.EXE
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • update_CITIFX.URS
  • vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    e8b35382b98f61463da4a5d7a3b50753


    Headers

    Imports

    Exports

    Sections

  • vcldb120.bpl
    .dll windows:5 windows x86 arch:x86

    e78d04af99957414a49233b5ebb70409


    Headers

    Imports

    Exports

    Sections

  • vclimg120.bpl
    .dll windows:5 windows x86 arch:x86

    65f155f20bde53bfbd4c0eb0050bf910


    Headers

    Imports

    Exports

    Sections

  • vclx120.bpl
    .dll windows:5 windows x86 arch:x86

    23f10bab66033603b81fd3b2e62b5516


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    58ebe63bde2e8d9e022f7f601830ac71


    Headers

    Imports

    Exports

    Sections