Overview

overview

7

Static

static

7

c7e2562ea4...18.exe

windows7-x64

7

c7e2562ea4...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

DNA.dll

windows7-x64

6

DNA.dll

windows10-2004-x64

3

Updater.exe

windows7-x64

7

Updater.exe

windows10-2004-x64

7

$APPDATA/P...er.exe

windows7-x64

3

$APPDATA/P...er.exe

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...ch.dll

windows7-x64

3

$PLUGINSDI...ch.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

docs/Prosp...on.url

windows7-x64

1

docs/Prosp...on.url

windows10-2004-x64

1

docs/license.rtf

windows7-x64

4

docs/license.rtf

windows10-2004-x64

1

docs/prospects.chm

windows7-x64

1

docs/prospects.chm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c7e2562ea40c1293b86b1c7f5cac5a81_JaffaCakes118

  • Size

    3.9MB

  • MD5

    c7e2562ea40c1293b86b1c7f5cac5a81

  • SHA1

    3fe577dfa10df46f6f716add19df56fbb4c4fc30

  • SHA256

    1fc941e2e3da2bc68f106ce978fa2ca5cd53ce03293b13ec842619b3b08656f7

  • SHA512

    6b7a96ccd01b0deaf13ffce85100f1c7f05804aee3c12608e00efee0927cee121053c4e18f6259a04e9eebb79577df3ca5fe15934a0862c34af203e84d553de5

  • SSDEEP

    98304:t2zR01+xlDMiB70BhPLZWi2GfcEQvpYcn/P8V2p:wt01+7QigL7nfc1pH4w

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 8 IoCs
    installer

Files

  • c7e2562ea40c1293b86b1c7f5cac5a81_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • DNA.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Updater.bmp
  • Updater.dat
  • Updater.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $APPDATA/PuchisoftDispatcher/$_4__$_5_/$0
  • $APPDATA/PuchisoftDispatcher/$_4__$_5_/Updater.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/English.ini
  • $PLUGINSDIR/ExtractDLLEx.dll
    .dll windows:4 windows x86 arch:x86

    bab48790663c56c456d63bc3e045f161


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VPatch.dll
    .dll windows:4 windows x86 arch:x86

    308dbf2136b37be830bdd627b8ff3095


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86

    e57536e0d3500471d52df7cea0d65a39


    Headers

    Imports

    Exports

    Sections

  • UpdaterLicense.txt
  • docs/Prospects it's all in the list - gathering your trade show & event information.url
  • docs/license.rtf
    .rtf
  • docs/prospects.chm
    .chm
  • docs/quick_start.rtf
    .rtf
  • docs/readme.rtf
    .rtf
  • logos/DayBook.gif
    .gif
  • logs/0.log
  • media/free daily tarot card/bkgrnd.gif
    .gif
  • media/free daily tarot card/en_splash1.gif
    .gif
  • media/prospects/handshake.gif
    .gif
  • media/prospects/prospects_r_template.jpg
    .jpg
  • media/unicorn/unicorn.jpg
    .jpg
  • media/unicorn/unicorn3.jpg
    .jpg
  • prospects.exe
    .exe windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections

  • slideshow/free daily tarot card/en_rw01.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw02.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw10.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw11.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw12.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw22.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw23.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw37.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw46.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw51.jpg
    .jpg
  • slideshow/free daily tarot card/en_rw70.jpg
    .jpg
  • themes/free daily tarot card.thm
  • themes/prospects.thm
  • themes/unicorn.thm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections