General

  • Target

    ba9f85da6d189136ec184570c7c7019a_JaffaCakes118

  • Size

    181KB

  • MD5

    ba9f85da6d189136ec184570c7c7019a

  • SHA1

    91d7e62d5b8a4b250e15c08e52c0f8d29b39d848

  • SHA256

    dd739de5ba98d9f2f4aaee6a994b38c06c67ae3a1e9e2b4bdbd0c4afa53273d2

  • SHA512

    0b9cde218cbb9c56360072377750f44803b1786590ef348f4c292f8b5967726f1702a9d3975a1393fd9c0135d224ab2db6301bba390bf890b0be0429972cf7cf

  • SSDEEP

    3072:xLk395hYXJm45+i+ZbJEfDUnRjy4wetX6tvsq3RV+zZPsfI6w1ZoNbqUYP/wwdI:xQqM1hloiRjtX6t1uh1ZoNYP/fdI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • ba9f85da6d189136ec184570c7c7019a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/1clogoEZL.bmp
  • $PLUGINSDIR/1clogoFTT.bmp
  • $PLUGINSDIR/1clogobvd.bmp
  • $PLUGINSDIR/EBanner.dll
    .dll windows:4 windows x86 arch:x86

    c759d72719f57a6b126c48a6fe97f6e7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IM_tb.bmp
  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/anon.bmp
  • $PLUGINSDIR/bab.bmp
  • $PLUGINSDIR/bab_off.bmp
  • $PLUGINSDIR/bab_on.bmp
  • $PLUGINSDIR/buzz.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/fm.bmp
  • $PLUGINSDIR/inc.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    5b9be84907034b8f0152e51177ceafc3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sIM.bmp
  • $PLUGINSDIR/save.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/yontoo.bmp
  • $PROGRAMFILES/1ClickDownload/$PROGRAMFILES/1ClickDownload/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections