General

  • Target

    a6a64f0bace62159e867db63e3facda4_JaffaCakes118

  • Size

    740KB

  • MD5

    a6a64f0bace62159e867db63e3facda4

  • SHA1

    c9f332db818df475870c0fd81dda6c5e263778a0

  • SHA256

    2d837e32a089fa3339d12040138ad97e15b2310f2427d611ddc0dc4f0ff3ab61

  • SHA512

    aa4a28602c6c7b6676d04695af1385a051b480395f6fbc57adce6a1b78eccaded899834bcbe454a671960cfc226755072f411df81d4394da315c1f19a49c4879

  • SSDEEP

    12288:jmSz/3hzoLFGFmGFosKQHQjJ7y7OiTZ9DRBtoZD1wUdkrf59Xt2MPvCB2wpqX0Q8:jmqGLFG43x8OIvto9zGxCMPKB2wnhFGS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • a6a64f0bace62159e867db63e3facda4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    fd5ce232e6703cc4ebbce551ac4fd8cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    ba3891ead2b1916a668d1301763262db


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
  • lineguide.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3872c1d492e40d96df053eebb78ba855


    Headers

    Imports

    Exports

    Sections

  • lineguide.dll.intermediate.manifest
    .xml
  • lineguideup.exe
    .exe windows:4 windows x86 arch:x86

    cda18251fd19e4ddaa6eca62e183fc1a


    Headers

    Imports

    Sections

  • lineguideup.exe.intermediate.manifest
    .xml
  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp