General

  • Target

    d4bf3a87a84fc5edf2be6742dc547885_JaffaCakes118

  • Size

    3.9MB

  • MD5

    d4bf3a87a84fc5edf2be6742dc547885

  • SHA1

    57a0d40263c3a65115c33becf5a1f13c2f498226

  • SHA256

    eeb0059700a3d4abe203d837976319dd15f405827181e80c3ffd5ec1756f33bd

  • SHA512

    bbf60addd5222e23c0d3a971077929a1ebdf11511cbdb0c95af6fd3d1969ccdd8e2f416b07d8663ea4f2e9649819fb19f437bf3278a35fbd8c3c8e6e9f4688f2

  • SSDEEP

    98304:lN/tUWQ+P5lYDY0hb1qOvnJarcmJYimkCmUgDtho83b77+:lN1U9+QX1vnJucmJIGth/Le

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • d4bf3a87a84fc5edf2be6742dc547885_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/cpudesc.dll
    .dll windows:4 windows x86 arch:x86

    c6a59b1080c20e84c1c392f75b2d75f4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowl.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowl2.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowl2_focus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowl2_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowl_focus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowl_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowr.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowr2.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowr2_focus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowr2_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowr_focus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/arrowr_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/bg.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_bottom.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_bottom_grad.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_bottom_left.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_bottom_right.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_left.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_right.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_top.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_top_grad.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_top_left.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/black_box_top_right.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/check_box.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/check_box.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/check_box_focus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/check_box_hover.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/check_box_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/colors.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/dark_style.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/default.xml
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/extra_widgets.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_bottom.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_bottom_left.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_bottom_left_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_bottom_right.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_bottom_right_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_center.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_left.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_right.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_top.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_top_left.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_top_left_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_top_right.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/graph_top_right_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide2.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide2_selected.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide_center.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide_center_selected.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide_center_thumb.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide_disabled.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide_selected.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slide_selected_disabled.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slider_small.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/h_slider_small_selected.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/handle_bottom.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/handle_bottom_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/handle_center.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/handle_center_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/handle_top.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/handle_top_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/layout.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/links.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/logo.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/logo_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/mapping.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button_disabled.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button_disabled_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button_hi.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/on_off_button_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/plus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/screw_small.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/screw_small_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo2.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo2_focus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo2_focus_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo2_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo_focus.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo_focus_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/shinylogo_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/slider.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/slider_small.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/small.xml
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/square.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/square_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/square_mouse_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/switch_button.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/switch_button.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/switch_button_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/switch_button_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/switch_button_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/text_value.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/title_bg_long.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/title_bg_long_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/16x16_mouse_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/about.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/about_hover.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/about_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/about_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/about_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/at.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/at_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/at_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/at_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/help.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/help_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/help_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/help_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/load.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/load_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/load_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/load_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/menu.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/menu_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/menu_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/menu_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/redo.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/redo_disabled.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/redo_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/redo_mouse_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/redo_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/redo_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/save.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/save_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/save_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/save_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/square.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/square_mouse_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/toolbar.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/toolbar_bg.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/undo.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/undo_disabled.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/undo_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/undo_pushed.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/undo_pushed_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/toolbar/undo_pushed_mouse_mask.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/tooltip.inc
  • Blue Cat Widening Triple EQ RTAS data/Skins/tpl.utils.inc
    .xml
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slide.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slide2.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slide2_selected.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slide_disabled.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slide_selected.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slide_selected_disabled.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slider_small.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/v_slider_small_selected.bmp
  • Blue Cat Widening Triple EQ RTAS data/Skins/vseparator_dark.bmp
  • Blue Cat Widening Triple EQ RTAS data/logo.ico
  • Blue Cat Widening Triple EQ RTAS data/manual.pdf
    .pdf
  • Blue Cat Widening Triple EQ RTAS data/uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • Blue Cat Widening Triple EQ RTAS.dpm
    .dll regsvr32 windows:5 windows x86 arch:x86

    e6357e41a8af9613e7f71abee46069ac


    Headers

    Imports

    Exports

    Sections

  • Blue Cat Widening Triple EQ RTAS.dpm.rsr
  • BlueCatWideningTripleEQ_vc9redist.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections