General

  • Target

    abca4ef2c95f01f840c9ecef8ac29257_JaffaCakes118

  • Size

    3.1MB

  • MD5

    abca4ef2c95f01f840c9ecef8ac29257

  • SHA1

    0ac01e891274e53731135058eb8637abd1699c2e

  • SHA256

    66637624bd2ca8299a1cc7a157a7613efb80b417568e01ccd9cdb592ecdd4a66

  • SHA512

    d2bad9fd38f0c2d89df99e8376f6abefe52b0671df8a701cf342c6b9e108ac5a1d454ba89cf5420126edb09e31caf2ef665ae9c4ab849ae74b28adce5fb87b23

  • SSDEEP

    98304:VmWSzYCIfMfNNJQuYotaUZ08Anr5GTLpBh5k6ML:nSMCIU1aK05nr5WVu6ML

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • abca4ef2c95f01f840c9ecef8ac29257_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • bin/agena.dll
    .dll windows:4 windows x86 arch:x86

    17abea25441f0a4e2906f5a9b30fab32


    Headers

    Imports

    Exports

    Sections

  • bin/agena.exe
    .exe windows:4 windows x86 arch:x86

    2650e2854bd9d41aab07894a95779634


    Headers

    Imports

    Sections

  • bin/agena.ico
  • bin/agenaedit.exe
    .exe windows:4 windows x86 arch:x86

    e2765c5ca50e9dce40c4552611fd6bde


    Headers

    Imports

    Sections

  • bin/change.log
  • bin/freetype6.dll
    .dll windows:4 windows x86 arch:x86

    f0fdb14f90c93ef898c479e7c9f3b1a1


    Headers

    Imports

    Exports

    Sections

  • bin/jpeg62.dll
    .dll windows:4 windows x86 arch:x86

    195ed063abe4d272b98b5adc8d072fb8


    Headers

    Imports

    Exports

    Sections

  • bin/libgd2.dll
    .dll windows:4 windows x86 arch:x86

    b22cbf478609887189f9c060988c494b


    Headers

    Imports

    Exports

    Sections

  • bin/libiconv2.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    e1835b7f4804244b03fffd302baaf1d8


    Headers

    Imports

    Exports

    Sections

  • bin/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    66f9cb3d68cd5d2ea55efc9413c08628


    Headers

    Imports

    Exports

    Sections

  • bin/licence
  • bin/xpm4.dll
    .dll windows:4 windows x86 arch:x86

    cc114267bc84893048a63ed51e593f4c


    Headers

    Imports

    Exports

    Sections

  • bin/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    07761085e6d5abbc4cbf0976d6b9a264


    Headers

    Imports

    Exports

    Sections

  • doc/agena-crashcourse.pdf
    .pdf
    • http://agena.sourceforge.net

    • http://agena.sourceforge.net/documentation.html65

  • doc/agena.pdf
    .pdf
    • http://3strings.seek

    • http://a.im

    • http://a.re

    • http://a.re:1

    • http://ads.free

    • http://agena-x.y.z-haiku.zip

    • http://agena.zip

    • http://binio.open

    • http://binio.seek

    • Show all
  • doc/agena.xls
    .xls windows office2003
  • lib/ads.agn
  • lib/ads.dll
    .dll windows:4 windows x86 arch:x86

    bcf37209d5a870cecb4c390d47721e56


    Headers

    Imports

    Exports

    Sections

  • lib/agena.ini.sample
  • lib/ansi.agn
  • lib/calc.agn
  • lib/calc.dll
    .dll windows:4 windows x86 arch:x86

    28d7f123ec40dec2074a808d91fc8dc9


    Headers

    Imports

    Exports

    Sections

  • lib/clock.agn
  • lib/compat.agn
  • lib/fractals.agn
  • lib/fractals.dll
    .dll windows:4 windows x86 arch:x86

    dfdfa17ef1788bf86460fcb2e6930e30


    Headers

    Imports

    Exports

    Sections

  • lib/gdi.agn
  • lib/gdi.dll
    .dll windows:4 windows x86 arch:x86

    eb9adeda8e0474dde6088efa4011e7b3


    Headers

    Imports

    Exports

    Sections

  • lib/library.agn
    .vbs
  • lib/linalg.agn
    .vbs
  • lib/linalg.dll
    .dll windows:4 windows x86 arch:x86

    db1565a079e8dd999b1768c69d850cda


    Headers

    Imports

    Exports

    Sections

  • lib/mapm.agn
  • lib/mapm.dll
    .dll windows:4 windows x86 arch:x86

    a6309b6fe80445d15fd6f3470bf8c9e8


    Headers

    Imports

    Exports

    Sections

  • lib/stats.agn
  • lib/stats.dll
    .dll windows:4 windows x86 arch:x86

    86e7f4a8aebb0f8a12f09093cba282d9


    Headers

    Imports

    Exports

    Sections

  • lib/xbase.agn
  • lib/xbase.dll
    .dll windows:4 windows x86 arch:x86

    e33e00f12d115be735836742c85eb6c2


    Headers

    Imports

    Exports

    Sections

  • schemes/agena.lang
    .xml
  • schemes/agena.sch
  • schemes/agena.xml
    .xml
  • schemes/nedit.rc
  • schemes/nedit.rc.solaris
  • schemes/readme.txt
  • share/agena128x128.ico
  • share/agena64x64.ico
  • share/agena8b.ico
  • share/agenasmall.ico
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp