General

  • Target

    c04073836b8e29dc110559d294a99afe_JaffaCakes118

  • Size

    2.7MB

  • MD5

    c04073836b8e29dc110559d294a99afe

  • SHA1

    dcb903c2f9877193a4bc3edf8e0adc952c2217f0

  • SHA256

    d495329f8ea7eee5e6a9cb1c5881d0ee09f2dcc977647a897426fb4fc0406587

  • SHA512

    31144622d54d4096717c89e0da08c704e926032a8acf33a0ff2ffb113cbeb92d1aa7516d1f740f0407a2985fbb8d6811ca758d79d0a48a1460da06f3b4196c8b

  • SSDEEP

    49152:UGbxJmHlSjSn8Z2jv6YwCuQVH0DRPmAV/PTnNYvGZzsLVIciwBH9PdgRbF19IfqZ:UAm0SwltbQGPmAVHTnNYtV11/kbvXEa

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • c04073836b8e29dc110559d294a99afe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/PICCLP32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    6e0787634aa4bc2239034c39a0e3a00d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/SLDrawForm.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    6194c12b8db3e25bf22fa53fb82fa467


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/LastGood/system32/ASYCFILT.DLL
    .dll windows:5 windows x86 arch:x86

    5deee9ef803f3882a12b5c1690dcfb3e


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/LastGood/system32/COMCAT.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $WINDIR/LastGood/system32/MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5d13f1b45437e48acf7175e1471cd9aa


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/LastGood/system32/OLEAUT32.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    f2c566a4e1032b7e51e40a63fb1c5b7d


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/LastGood/system32/OLEPRO32.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    bfbea1910cdffc9fc4cb569cbd816073


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/LastGood/system32/STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • Main_dtdj.ini
  • SL_SuDoku.exe
    .exe windows:4 windows x86 arch:x86

    2e8c95c2f13146820695e1846634abdf


    Headers

    Imports

    Sections

  • SuDoku.SLD
  • Uninstall/IRIMG1.JPG
    .jpg
  • Uninstall/IRIMG2.JPG
    .jpg
  • Uninstall/uninstall.dat
  • Uninstall/uninstall.xml
  • Wav/chimes.wav
  • Wav/end.wav
  • Wav/folder.wav
  • Wav/help.wav
  • Wav/right.wav
  • Wav/soundon.wav
  • Wav/won.wav
  • Wav/wrong.wav
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp