General

  • Target

    c140d41ca3795bba23dbe431dd41df60_JaffaCakes118

  • Size

    14.7MB

  • MD5

    c140d41ca3795bba23dbe431dd41df60

  • SHA1

    793b113a8659b5756d2a9d76a9a29419a720cfc1

  • SHA256

    4030c59757b90c82f029c66155ee410169c16562c6e8cf78e3f5b2b1cd2be27c

  • SHA512

    92ee7d137dbdc8ba49e008f77acadb3922d8a897a042f26c2a017e04768db0d8b29649d95f9d81f1e716e5469026e20111ce7df155001be7328e8e9794128d8e

  • SSDEEP

    393216:fcyA2DPg7EY/wPcrlSR7knfwOBReEuqkmVfOX:fj5g4PvleJBxbkMq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c140d41ca3795bba23dbe431dd41df60_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9bca2c7cb3bba360100a3a7a510fe11d


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/EstUrl.dll
    .dll windows:4 windows x86 arch:x86

    5eebff966e82adb38fe32cb21b559567


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    34e265a7f45a5a54be208d4166ec2423


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    88d8a4a9c21e345682f6b1fac45c4679


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    f9dfb8ff6a049e4feb3afa5b7a47b099


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsWeb2.dll
    .dll windows:4 windows x86 arch:x86

    082c20552519a39cb8a90624898536df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/workerExtension.dll
    .dll windows:4 windows x86 arch:x86

    df43e2726dcab9b6f22860bb9f0bca55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/zumlib.dll
    .dll windows:5 windows x86 arch:x86

    21fa3de354d5a9d861e97fa5384231b7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/ESTsoft/ALUpdate/$R6
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/ESTsoft/Common/ezt.exe
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $R6
    .dll regsvr32 windows:5 windows x86 arch:x86

    22d4f9aca50cebaa5f771f0134d48e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZip.exe
    .exe windows:5 windows x86 arch:x86

    7f405e6faf7f6aa08d6fd37ac609bbac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ALZipCon.exe
    .exe windows:5 windows x86 arch:x86

    e482bbcbb6cf7bfe16d142f841df40e2


    Code Sign

    Headers

    Imports

    Sections