General

  • Target

    b2126f89d07c540fac6ac13ba6a2edfb_JaffaCakes118

  • Size

    4.1MB

  • MD5

    b2126f89d07c540fac6ac13ba6a2edfb

  • SHA1

    7a45be476f42e7cdb9fe372ccdc10341ac6276b2

  • SHA256

    d7be441ec9c456b3df1a232702d777b73d7ff4bfda328ebe5723fdccee5f21c1

  • SHA512

    6fd4c35eb3ae2ee1bbe91831f0979ec9f66b05afad64f538d4332a4df2560624f958ab5b8b14129512e15901f0741ee563d257dc4812ee60d33b285ea20a450a

  • SSDEEP

    98304:yGx8LIq+o1Kgb9baKP+kB4XLne3tcbdS+6eYVylbtQHisTw7:Fx8LI8KybaKPx4XrsC5dnJbtQHzG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • b2126f89d07c540fac6ac13ba6a2edfb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LockedList.dll
    .dll windows:5 windows x86 arch:x86

    f3d1592afd58c9d588a71932729da9c1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/sonarinst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LockedList.dll
    .dll windows:5 windows x86 arch:x86

    f3d1592afd58c9d588a71932729da9c1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewall.dll
    .dll windows:4 windows x86 arch:x86

    1a4c99175e8891c64634680f4f238d51


    Headers

    Imports

    Exports

    Sections

  • BsSndRpt.exe
    .exe windows:5 windows x86 arch:x86

    fd588b0f3128b520596e1598b3a0c74c


    Code Sign

    Headers

    Imports

    Sections

  • BugSplat.dll
    .dll windows:5 windows x86 arch:x86

    75133541298fd16898da890b83feccc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BugSplatRc.dll
    .dll windows:5 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • SonarAx.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    05d2de698196328ffae4e29296816f21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SonarHost.exe
    .exe windows:5 windows x86 arch:x86

    93f57ea1c8b5678947908f980602748f


    Code Sign

    Headers

    Imports

    Sections

  • channelClientJoined.wav
  • channelClientParted.wav
  • channelJoined.wav
  • channelParted.wav
  • dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    1ad421b72e4dc353621547a143130420


    Headers

    Imports

    Exports

    Sections

  • esnsonar_uninstall.exe.nsis
  • headerImage.png
    .png
  • iconCaptureMuted.png
    .png
  • iconInChannel.png
    .png
  • iconPlaybackMuted.png
    .png
  • iconTalking.png
    .png
  • include/libsonarclient.h
  • include/libsonarclient_c.h
  • libsonarclient.dll
    .dll windows:5 windows x86 arch:x86

    18f21292d92d283f253527ceda7827c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libsonarclient.lib
  • npesnsonar.dll
    .dll windows:5 windows x86 arch:x86

    18f21292d92d283f253527ceda7827c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sonaricon.ico
  • version.txt
  • ESNLaunchAx.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    120d6551d3d7a920aeaa4c6a60527475


    Headers

    Imports

    Exports

    Sections

  • esnlauncher.exe
    .exe windows:5 windows x86 arch:x86

    cce5d58076e37c7a4fa5dfaf99fd5d3d


    Headers

    Imports

    Sections

  • npesnlaunch.dll
    .dll windows:5 windows x86 arch:x86

    3d120da843daa5330b522f82f0589f55


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis