General

  • Target

    a27dfa21949ac7019bc9c4110975f68b_JaffaCakes118

  • Size

    815KB

  • MD5

    a27dfa21949ac7019bc9c4110975f68b

  • SHA1

    6793d613e0e7e25842d9e70d2d00e498f46f0a00

  • SHA256

    56203540345934512a2a31c7a261e82e89709fa29a784de6a1b302dae8d3e1c8

  • SHA512

    bac345eba097dc150919d4049f7f79ca460b20fb6ead11d4925f01ae89b2e5490cc61336f4e741fe2d6ce0080f5459a7dca5c6036a448e53e4c01d15e15111e8

  • SSDEEP

    12288:qZm6j0eKnrkWlidP09oDMR33lEFITFdrlgbVo7zHx/RvPDXToPl0aSlFro/Osss7:qZm6QeIkJpk+MRHlEqTP+hszPDjkWsB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • a27dfa21949ac7019bc9c4110975f68b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    3113e12e0486a5a5251713b60422a7d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/jsonparser.dll
    .dll windows:4 windows x86 arch:x86

    9477ce594d6aa3189ce13a8753710458


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86

    e57536e0d3500471d52df7cea0d65a39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nshist.dll
    .dll windows:4 windows x86 arch:x86

    5f100c36811a4c587bc08276d7725e60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sqlwrap.dll
    .dll windows:4 windows x86 arch:x86

    fdc6ee00ab15ae25a28615ceaa6f4284


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/timepro.dll
    .dll windows:4 windows x86 arch:x86

    2187c9e78816febf7a90a23c7c7d6940


    Headers

    Imports

    Exports

    Sections

  • $R0/bing-zugo.xml
    .xml
  • $_148_/AskSearchAsst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86

    e57536e0d3500471d52df7cea0d65a39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $_30_/searchplugins/ask.uk.xml
  • $_148_/AskSearchAsst.ini
  • $_148_/ask.ico
  • $_148_/yahoo-zugo.xml
    .xml