General

  • Target

    95f6bdb67d45cf8dd62fd65dddb03364_JaffaCakes118

  • Size

    9.9MB

  • MD5

    95f6bdb67d45cf8dd62fd65dddb03364

  • SHA1

    fe8d89996b07083ff8a43e6441d630715d821551

  • SHA256

    625b5d3bd1e41fed0d310e168f05805e6d8f15aec069295d8fccc94002195ec7

  • SHA512

    67bd6d340b7fe9d2f13749f06f451521dc3cee555bd2d1b551f30c33e1371368968061c263a6625e28102b60bac7eb5d6db0940791063619100a5e437f27197a

  • SSDEEP

    196608:RUzhEMRd3I+O6Lei5Br6yL2sO2SnKiHG+Jcmo6UETTtRcmIKIiQO6fSV9wIFub0r:qeTdwTLOHn2+JcmRUEftRbnI7PqVODIR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 95f6bdb67d45cf8dd62fd65dddb03364_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    2a1ab6b72adad6b03d0746b0a5fa55d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    27837b74c256ce63e02dcb4f941f7540


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    408c2428cb74457edb176e43ccfb47ce


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/libssl32.dll
    .dll windows:4 windows x86 arch:x86

    f11485595aae8f17cc31d09c432c1224


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/spool/drivers/color/AdobeRGB1998.icc
  • $SYSDIR/spool/drivers/color/SFprofK (Exp10000XL).icc
  • $SYSDIR/spool/drivers/color/SFprofR (Exp10000XL).icc
  • $SYSDIR/spool/drivers/color/SFprofT (Exp10000XL).icc
  • $SYSDIR/spool/drivers/color/eciRGB_v2.icc
  • $SYSDIR/spool/drivers/color/eciRGB_v2.rtf
    .rtf
  • $SYSDIR/spool/drivers/color/eciRGB_v2_ICCv4.icc
  • $SYSDIR/spool/drivers/color/sRGB.icc
  • $TEMP/apix46.vx_
  • $TEMP/aspi2k.sy_
  • $TEMP/aspi32.sy_
  • $TEMP/aspi64.sys
  • $TEMP/aspiinst.exe
    .exe windows:4 windows x86 arch:x86

    950b12d9a8b53f7804d5427f96a876c4


    Headers

    Imports

    Sections

  • $TEMP/aspixp.sys
    .sys windows:5 windows x86 arch:x86

    a0ef89ff5c735192d23ddd3f9f8b1f89


    Headers

    Imports

    Sections

  • $TEMP/install.bat
  • $TEMP/reg_xp.exe
    .exe windows:4 windows x86 arch:x86

    4940749f75f1508ae1f02e7aae3c47f5


    Headers

    Imports

    Sections

  • $TEMP/winaspi.dl_
  • $TEMP/wnaspi2k.dl_
  • $TEMP/wnaspi32.dl_
  • $TEMP/wnaspi46.dl_
  • $TEMP/wnaspi64.dll
    .dll windows:4 windows x86 arch:x86

    1b44b8702c08be11c862a6801d114d64


    Headers

    Imports

    Exports

    Sections

  • $TEMP/wnaspixp.dll
    .dll windows:4 windows x86 arch:x86

    1e0edcf6ff832f8af52f4815ce3a7443


    Headers

    Imports

    Exports

    Sections

  • $TEMP/wowpost.ex_
  • $WINDIR/System/Color/AdobeRGB1998.icc
  • $WINDIR/System/Color/SFprofK (Exp10000XL).icc
  • $WINDIR/System/Color/SFprofR (Exp10000XL).icc
  • $WINDIR/System/Color/SFprofT (Exp10000XL).icc
  • $WINDIR/System/Color/eciRGB_v2.icc
  • $WINDIR/System/Color/eciRGB_v2.rtf
    .rtf
  • $WINDIR/System/Color/eciRGB_v2_ICCv4.icc
  • $WINDIR/System/Color/sRGB.icc
  • $WINDIR/System32/DICELibSF1.dll
    .dll windows:4 windows x86 arch:x86

    2bd19628ae0f04ecc0345c93b6e54e04


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/DICELibSF2.dll
    .dll windows:4 windows x86 arch:x86

    e4dfbd95507e014d7bfcfc9c2cac9e96


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/esdice63.dll
    .dll windows:4 windows x86 arch:x86

    0adf0dc5f4970bd58a2682de7c2d1a1c


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/esint54.dll
    .dll windows:4 windows x86 arch:x86

    bdc92248c127aa4fc50c6c5d3b16fe1f


    Headers

    Imports

    Exports

    Sections

  • Docs.xml
    .xml
  • Movies.xml
    .xml
  • ReadMe.rtf
    .rtf
  • SF Launcher.exe
    .exe windows:4 windows x86 arch:x86

    49a0a1cbfca2af68aed5da9fd2fef811


    Headers

    Imports

    Sections

  • SF Launcher.exe.manifest
    .xml
  • SF Universal Launcher.exe
    .exe windows:4 windows x86 arch:x86

    59b902447f49cd04dd1c2361b090e60a


    Headers

    Imports

    Sections

  • SilverFast (EpsonIT8).8ba
    .dll windows:4 windows x86 arch:x86

    12c6f2146393f926457ba19af57784b0


    Headers

    Imports

    Exports

    Sections

  • SilverFast/Customize/Splash_ai.bmp
  • SilverFast/Customize/Splash_aiit8.bmp
  • SilverFast/Customize/Splash_aistudio.bmp
  • SilverFast/Customize/Splash_aistudioit8.bmp
  • SilverFast/FirstLaunchMovie.mov
  • SilverFast/MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • SilverFast/WebServices.dll
    .dll windows:4 windows x86 arch:x86

    11b390a69118a2c946edcb6c6bb09b48


    Headers

    Imports

    Exports

    Sections

  • SilverFast/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Tools/Gadget.exe
    .exe windows:4 windows x86 arch:x86

    c1cb17ba40fbf08ce300b0fc97e3c8d9


    Headers

    Imports

    Sections

  • gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    2a1ab6b72adad6b03d0746b0a5fa55d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sssfd.dll
    .dll windows:4 windows x86 arch:x86

    7bcacacd12b2fdc31273a0e011ceb17f


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp