General

  • Target

    bb928bf7ce78c7af5a3b038b215b7f40_JaffaCakes118

  • Size

    196KB

  • MD5

    bb928bf7ce78c7af5a3b038b215b7f40

  • SHA1

    82abbbb67a42471f123b831ba5d87f5a60881394

  • SHA256

    9a462d8a9fa309eb3c091ad3360c163cfa62da5baf4ec369a16ca57d07ce49f9

  • SHA512

    ca7f05f5eaaf0e12c025f363c190f69b51c00f49da89e2eb9b0152ca3bbf18d3303af2c9dd9d1c8d2e7771114d181f3c568c16788089eae4bdfbdf73e442110c

  • SSDEEP

    3072:FLk395hYXJq45+0kSvDTTnRjy4wetX6tvsq3RV+zZPsfI6R5C1ZoNbqUYP/wwdI:FQqg1JSLTDRjtX6t1uUC1ZoNYP/fdI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • bb928bf7ce78c7af5a3b038b215b7f40_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/1clogoEZL.bmp
  • $PLUGINSDIR/1clogoFTT.bmp
  • $PLUGINSDIR/1clogobvd.bmp
  • $PLUGINSDIR/1clogoddd.bmp
  • $PLUGINSDIR/1clogowb.bmp
  • $PLUGINSDIR/EBanner.dll
    .dll windows:4 windows x86 arch:x86

    c759d72719f57a6b126c48a6fe97f6e7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IM_tb.bmp
  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WB.bmp
  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/anon.bmp
  • $PLUGINSDIR/bab.bmp
  • $PLUGINSDIR/bab_off.bmp
  • $PLUGINSDIR/bab_on.bmp
  • $PLUGINSDIR/buzz.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/fm.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    5b9be84907034b8f0152e51177ceafc3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sIM.bmp
  • $PLUGINSDIR/save.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/yontoo.bmp
  • $PROGRAMFILES/1ClickDownload/$PROGRAMFILES/1ClickDownload/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections