General

  • Target

    ac1c564af83a4eb941c49f9f657233ad_JaffaCakes118

  • Size

    604KB

  • MD5

    ac1c564af83a4eb941c49f9f657233ad

  • SHA1

    8ca8d17b7393b06b6e29ad89b722439d9157f0a1

  • SHA256

    965ca35c2cd796306bf670209addffb4bcc4d7c1cff10b4a85932b2e5a11b697

  • SHA512

    6646fec1000adcde6c2780095441f0ebbba12d037a09d1e23bfaf75b16a20da1099dac602e61261009a76c3531241f7ddfb3812d53b3e9f4edc9afbb45886cd3

  • SSDEEP

    12288:K9csO3x600l7UhIGMd+qwxwt9827YTriIXs04cyvrLj9:Kab6pBUmGytZQGIJ4nvrLj9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • ac1c564af83a4eb941c49f9f657233ad_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 4.3/Downloader.exe
    .exe windows:4 windows x86 arch:x86

    adda060ecf3ab081f52346f46dfdd4b0


    Code Sign

    Headers

    Imports

    Sections

  • 4.3/Uninstall.exe.nsis
  • 4.3/WhiteList.dll
    .dll windows:4 windows x86 arch:x86

    4d3e7fd34ec73559b928a3bc5439c348


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 4.3/alert.html
    .html .js polyglot
  • 4.3/allowpopup.xml
    .xml
  • 4.3/basis.xml
    .xml
  • 4.3/blockpopup.xml
    .xml
  • 4.3/favicon.ico
  • 4.3/images/Icons.bmp
  • 4.3/images/Thumbs.db
  • 4.3/images/greenquestion.gif
    .gif
  • 4.3/images/rating.bmp
  • 4.3/images/redifflogo.BMP
  • 4.3/images/safe.bmp
  • 4.3/images/sep.bmp
  • 4.3/images/tick.gif
    .gif
  • 4.3/images/unsafe.bmp
  • 4.3/images/yellow.gif
    .gif
  • 4.3/inst.bat
  • 4.3/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • 4.3/msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    799e28bcbf4e94ca50e4b0a2c283ab7d


    Headers

    Imports

    Exports

    Sections

  • 4.3/options.html
    .html
  • 4.3/redifftoolbar.crc
  • 4.3/redifftoolbar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4733441b8698160c7532a1c94085673e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 4.3/redifftoolbar.inf
  • 4.3/tbs_include_script_004681.js
    .js
  • 4.3/version.txt