General

  • Target

    bf0065b8460befac9e0054264a80809f_JaffaCakes118

  • Size

    2.5MB

  • MD5

    bf0065b8460befac9e0054264a80809f

  • SHA1

    c5b428790509ed82bc613f6c0a04d643de69d655

  • SHA256

    e6e26e5d94522f82ba4a4a0dbd57971070a2225d9154d94118e2ba7c33792db4

  • SHA512

    8ab38c86ae67f601798dc748e5d86df8542fc8f37b987bf1f94f7ca774d3f1de50510989486511abd2a9bce71fc0f978a3dca3dfb94e9d52a788e3a9591135fc

  • SSDEEP

    49152:twonz+ewqgqVOMSBlsGSBEty86a7PDyCMb//nGEAHXPIZBr8n:ConDxgYOMMsdBEtyCP4bIfIvrC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • bf0065b8460befac9e0054264a80809f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • config.dll
    .dll windows:5 windows x86 arch:x86

    ec04767df02d0f5e543bd9bd399afce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • fancysetup.exe
    .exe windows:5 windows x86 arch:x86

    2bca1372d9ae6e1c5ddad358699a3352


    Code Sign

    Headers

    Imports

    Sections

  • iconAnimate.exe
    .exe windows:5 windows x86 arch:x86

    b4b50f01529bb76779ed95a70fbeb1eb


    Code Sign

    Headers

    Imports

    Sections

  • iconTips.exe
    .exe windows:5 windows x86 arch:x86

    84cd1ddf0ce9c6a74d331bc445074f42


    Code Sign

    Headers

    Imports

    Sections

  • qiyue.exe
    .exe windows:5 windows x86 arch:x86

    2ce3a028f67b8cd50455db6ac7115c66


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WizModernImage.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections