General

  • Target

    b11d6164257fe248d0da660ddc5e6da8_JaffaCakes118

  • Size

    683KB

  • MD5

    b11d6164257fe248d0da660ddc5e6da8

  • SHA1

    e89b1574a38dfa17e6028714ab22e8befc05c0ff

  • SHA256

    d0b454588eb169b4c3b0f3d7eaa7ca012796ffa5e9ec626ab79a66f468f64616

  • SHA512

    52e44d2fb583a05c70955c2479ef216e1fc9808844af17069519bad943ea2d7d3789d8bbc0383c5531813ba22e10fc35690d2f44b10f45fc3b54d148c2fcb987

  • SSDEEP

    12288:AB6eK9dDvp6s9FmkmFXZ6Qh6kFzcQEACbgDISG9YqfDvpeTqgsv/xoEand74JdFX:ABpK9t0smTJ6KzFoQETgDIfDvpaqJg45

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b11d6164257fe248d0da660ddc5e6da8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1776ef176e821fae67f5fb6eb56cce45


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/flag.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/save_ad.bmp
  • $PLUGINSDIR/testimgs1.ini
  • $SYSDIR/ATL71.DLL
    .dll windows:4 windows x86 arch:x86

    9399b4de2daf372a7325cd32fbe93edf


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/MSVCR71.DLL
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1776ef176e821fae67f5fb6eb56cce45


    Headers

    Imports

    Sections

  • OSmile.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a79db3540c8bab8b2195a038966937cd


    Headers

    Imports

    Exports

    Sections

  • WrdSmile.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4dd97b683073ce3fa5a552a9de33e4f0


    Headers

    Imports

    Exports

    Sections

  • bf.dat
  • bm.dat
  • insmile.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c5c22c9779cc9b55e42a6febc4a84272


    Headers

    Imports

    Exports

    Sections

  • plugin.dll
    .dll windows:4 windows x86 arch:x86

    d5a29fac7bfcb070ede13311df33326f


    Headers

    Imports

    Exports

    Sections

  • plugin.exe
    .exe windows:4 windows x86 arch:x86

    857d4866ddfa8f734b5ff5af9697b1ad


    Headers

    Imports

    Sections

  • serv.dat
  • ver.dat