General

  • Target

    c0c0d367be36a946ed9f7020b714e076_JaffaCakes118

  • Size

    1.2MB

  • MD5

    c0c0d367be36a946ed9f7020b714e076

  • SHA1

    44a608f03b955fa5263bdd22d43c8b942443ee66

  • SHA256

    4134ef8786ea95000b13818220af5c6f5bf43483ba3595bfc5e48259fa774207

  • SHA512

    1b120269811028cc925af9f36e6fbbc8011560f9da666f118d7e21be8589bdce901e6f9369ee10eeb26cb3f981352b13ffdfb1baadd2ac175fce439a30bd5711

  • SSDEEP

    24576:jVSyNuUchNRmo7v2lTkhUIJMbRFr9COnX4TA6lToCpfry:jVdkUchf7+Blb/RCY6lXG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • c0c0d367be36a946ed9f7020b714e076_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    97318da386948415d08cef4a9006d669


    Headers

    Imports

    Sections

  • $APPDATA/IESafer/KSWebShield.exe
    .exe windows:4 windows x86 arch:x86

    a1575143c7276d23e65a1698d2158da9


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/IESafer/kswbc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d722b46f77981ed8b9edd09cabf8597d


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/IESafer/kswebshield.dll
    .dll windows:4 windows x86 arch:x86

    4504c1c05d2b0811d19f8f3e5b799206


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/IESafer/kwssp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • IEDriver.dll
    .dll windows:4 windows x86 arch:x86

    5e9948431e6e4d64378961345d139c23


    Headers

    Imports

    Exports

    Sections

  • IEManager.dll
    .dll windows:4 windows x86 arch:x86

    2f0ee47156e789331ac200edc241cf7c


    Headers

    Imports

    Exports

    Sections

  • IEMate.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a0e15d8fb3be857729154ba1d8329143


    Headers

    Imports

    Exports

    Sections

  • IEMateLib.DLL
  • IEMateLib2.DLL
  • IEMateLib3.DLL
  • IEPromotion.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6cc0ef3da90d0a1be17abd1af2082c16


    Headers

    Imports

    Exports

    Sections

  • IEProtect.dll
    .dll windows:4 windows x86 arch:x86

    2116dd0b957022e6dc2bb13ac56d05b5


    Headers

    Imports

    Exports

    Sections

  • IERepair.exe
    .exe windows:4 windows x86 arch:x86

    46589c781bb842e78b0e0c90df91d1a5


    Headers

    Imports

    Sections

  • NsPlugin.dll
    .dll windows:4 windows x86 arch:x86

    03a6a7a20fcbf4d48d73a69b61a44175


    Headers

    Imports

    Exports

    Sections

  • cab.dll
    .dll windows:4 windows x86 arch:x86

    42febd0d194e323cddcc94850154f2e4


    Headers

    Imports

    Exports

    Sections

  • fixhomepage.exe
    .exe windows:4 windows x86 arch:x86

    fc6e99a36570027ad31a479773e059d0


    Headers

    Imports

    Sections

  • navagation.ini
  • option.ini
  • page/img/01.gif
    .gif
  • page/img/02.gif
    .gif
  • page/img/03.gif
    .gif
  • page/img/05.gif
    .gif
  • page/img/05_w.gif
    .gif
  • page/img/1.gif
    .gif
  • page/img/11.gif
    .gif
  • page/img/12.gif
    .gif
  • page/img/bg.jpg
    .jpg
  • page/img/btn.gif
    .gif
  • page/img/ie.gif
    .gif
  • page/img/ie.jpg
    .jpg
  • page/img/jt.gif
    .gif
  • page/img/line.gif
    .gif
  • page/img/logo.gif
    .gif
  • page/img/mouseGesture.gif
    .gif
  • page/img/oms_008.gif
    .gif
  • page/img/recover1.jpg
    .jpg
  • page/img/recover2.gif
    .gif
  • page/img/recover3.jpg
    .jpg
  • page/img/recover4.jpg
    .jpg
  • page/img/search_bg.gif
    .gif
  • page/img/search_bottom.gif
    .gif
  • page/img/search_gl.gif
    .gif
  • page/img/search_ts.gif
    .gif
  • page/img/start_lbg.gif
    .gif
  • page/img/stockTip.gif
    .gif
  • page/img/sub_01.gif
    .gif
  • page/img/wait.GIF
    .gif
  • page/main.htm
    .js
  • page/recover.htm
    .js
  • page/saveimage.htm
    .html
  • page/stockData.htm
    .html .js polyglot
  • page/wizard.htm
    .html .js polyglot
  • plugins/imFilter.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    745ceb2e4fd1cc75db2946d09dce203e


    Headers

    Imports

    Exports

    Sections

  • plugins/inlinesearch.dll
  • plugins/suggest.dll
  • regedit.dll
    .dll windows:4 windows x86 arch:x86

    580179c74542b6ee64e3f37abcf77d44


    Headers

    Imports

    Exports

    Sections

  • search.ini
  • stock.dll
  • update.ini