General

  • Target

    97409f4f5cbc1a56053b1d0a45242cb0_JaffaCakes118

  • Size

    3.8MB

  • MD5

    97409f4f5cbc1a56053b1d0a45242cb0

  • SHA1

    ca6802dfc3c252646886b33d6903d4d835a15100

  • SHA256

    6569757c62925b3c0d6dd9aa82213ec12489f09f6cef7939559c59ee29b53033

  • SHA512

    d3751d8c83fb652122bb13740884ca28ac62b4978769edd6a04215b9bc2f38cbdd073e663bcae02756b7669762d7428312439340f929838bb793611394925d69

  • SSDEEP

    98304:/TRq6qzO/S2nSxO+xeJ1Y6kU3y0yXA31tgPuTbLJt3idEhj:/tq6qzOPnS8+4Ty0KA31tDL33iChj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 5 IoCs

Files

  • 97409f4f5cbc1a56053b1d0a45242cb0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $APPDATA/SpyFree 3.5/Data/spfdaxo.spf
  • $APPDATA/SpyFree 3.5/Data/spfdmwc.spf
  • $APPDATA/SpyFree 3.5/Data/spfdmwd.spf
  • $APPDATA/SpyFree 3.5/Data/spfdmwq.spf
  • $APPDATA/SpyFree 3.5/Data/spfdmwqs.spf
  • $APPDATA/SpyFree 3.5/Data/spfdmwt.spf
  • $APPDATA/SpyFree 3.5/spfstg.spf
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ScrollLicense.dll
    .dll windows:4 windows x86 arch:x86

    241cd43f5540cd5c958a3c62d980c89c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleSC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsSFE.dll
    .dll windows:4 windows x86 arch:x86

    d412cf3e4bbccbd4eb26d8ca3842eef4


    Headers

    Imports

    Exports

    Sections

  • SpyFree.exe
    .exe windows:4 windows x86 arch:x86

    e9ca9adf9b22b839e0f31788f9eb4ae0


    Headers

    Imports

    Sections

  • SpyFreeUI.exe
    .exe windows:4 windows x86 arch:x86

    0fb315df454eefd84bf089cbbdc19949


    Headers

    Imports

    Sections

  • SpyFreeUP2.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • SpyFreeUpdate.exe
    .exe windows:4 windows x86 arch:x86

    07080841f36e59aefafd3118f78d30cb


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleSC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    de9a1ba9aace5018787e8cd90b777b88


    Headers

    Imports

    Exports

    Sections

  • lang/SpyFree.lng
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcd2542f46e742c06cabefff84c7320d


    Headers

    Imports

    Exports

    Sections

  • msvcirt.dll
    .dll windows:5 windows x86 arch:x86

    c9e4d1c3c611270cb8fe488259e71c2a


    Headers

    Imports

    Exports

    Sections

  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • spfhis.dll
    .dll windows:4 windows x86 arch:x86

    3a6ef385b86af811643a4b909fb11955


    Headers

    Imports

    Exports

    Sections

  • spfhrd.dll
    .dll windows:4 windows x86 arch:x86

    00a180a2852c36d1307629450958419b


    Headers

    Imports

    Exports

    Sections

  • spfidc.dll
    .dll windows:4 windows x86 arch:x86

    2efd61caa8bebb181d4909f68228cfaa


    Headers

    Imports

    Exports

    Sections

  • spfipt.dll
    .dll windows:4 windows x86 arch:x86

    1ef2c589b0ecfbb59f11f64d3f2a9496


    Headers

    Imports

    Exports

    Sections

  • spfmrd.dll
    .dll windows:4 windows x86 arch:x86

    767ea8cd486ce4c6f2b2c79df0d0717c


    Headers

    Imports

    Exports

    Sections

  • spfmwb.dll
    .dll windows:4 windows x86 arch:x86

    6142d0b77b18af3400b53a5545458aca


    Headers

    Imports

    Exports

    Sections

  • spfmwnt.dll
    .dll windows:4 windows x86 arch:x86

    c85f26b343f8574226642498de62b848


    Headers

    Imports

    Exports

    Sections

  • spfmwt.dll
    .dll windows:4 windows x86 arch:x86

    3092f672802eb1b50160ff96ca7c2e75


    Headers

    Imports

    Exports

    Sections

  • spfreg.dll
    .dll windows:4 windows x86 arch:x86

    b0f6c098b1fef65627a97ced067bb8b5


    Headers

    Imports

    Exports

    Sections

  • spfstc.dll
    .dll windows:4 windows x86 arch:x86

    2c7fe218f1748e4745fc10e61a560d47


    Headers

    Imports

    Exports

    Sections

  • spfsvc32.exe
    .exe windows:4 windows x86 arch:x86

    e2cecb3a7536ab5ebb1fc4c0bc320067


    Headers

    Imports

    Sections

  • spfsys.dll
    .dll windows:4 windows x86 arch:x86

    1780e997c1ec4b43416b7df02f3ee855


    Headers

    Imports

    Exports

    Sections

  • spfupk.dll
    .dll windows:4 windows x86 arch:x86

    0446135f9ed40cb9b9a582ea285a0c23


    Headers

    Imports

    Exports

    Sections

  • spfupt.dll
    .dll windows:4 windows x86 arch:x86

    73ff1878db3472615c5445210aa224a4


    Headers

    Imports

    Exports

    Sections