General

  • Target

    b5b9894037693bb6c1ef66c3a6ae7404_JaffaCakes118

  • Size

    1.5MB

  • MD5

    b5b9894037693bb6c1ef66c3a6ae7404

  • SHA1

    5080dfa5b61809475b4ed598d5b94245857e1724

  • SHA256

    2f2c97fd5dec10a756277c747d937af0dd6207448bce0d20c9e2f0438d308c4b

  • SHA512

    09cfef5a9ae8ecf1d89d0eef2926d2417c64b89b17e891e0c590a53c7040d698072c467b1beb1f46f44190b7a8d40ea017f1724449c4d7aebae265505b30d75f

  • SSDEEP

    24576:bYD/0UoD/xEZgRC8NWJ3kpK9aMzPN6MMd3gniefyInRWHDgQzGZvf/qBW3pmXcUG:bKjoFCgRC8wypKMMR6Ani4JYHEQAaBil

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b5b9894037693bb6c1ef66c3a6ae7404_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728848c674a670ce8220f0b1d666d54c


    Headers

    Imports

    Sections

  • $0/$OUTDIR/$R7
    .dll regsvr32 windows:5 windows x86 arch:x86

    f64be9151e7aa8016c4f9d7320fd77bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $0/$R6
    .dll regsvr32 windows:5 windows x86 arch:x86

    f64be9151e7aa8016c4f9d7320fd77bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/estUrl.dll
    .dll windows:4 windows x86 arch:x86

    aeb0edeb54208adc73862fb1c6c83f01


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    6088c3f2e83ca6fe82763ba32ca3c517


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installComplete.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsWeb2.dll
    .dll windows:4 windows x86 arch:x86

    695a30aed014651701a12fe0949725e8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/workerExtension.dll
    .dll windows:4 windows x86 arch:x86

    fade222896370c7bd728b537619b8154


    Headers

    Imports

    Exports

    Sections

  • $_18_/_$R8/AZCtm.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    f64be9151e7aa8016c4f9d7320fd77bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZip.exe
    .exe windows:5 windows x86 arch:x86

    d9f7a1dcca45e51e2c098bf5dccc74d4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZipCon.exe
    .exe windows:5 windows x86 arch:x86

    8815396101dd44c67476779a106db2ff


    Code Sign

    Headers

    Imports

    Sections