General

  • Target

    d9b16199bfcecc5fad40be403075512a_JaffaCakes118

  • Size

    7.8MB

  • MD5

    d9b16199bfcecc5fad40be403075512a

  • SHA1

    a13864987882c6cbc251d3b3926e4ab5e595b7ce

  • SHA256

    a960e86396627254743c3901d07bf52a77d682d6ce4fc0c277f0c73028fe8006

  • SHA512

    90bb29883d87143576b15ebc80482a545a076092cb89ebb31d1b4ed888846ff5f321e8f851dffb875bc0c390cf5cc07d87a16e55ef90cf0a4065434268612bb2

  • SSDEEP

    196608:2rHKKqD05Yx86zAQNe7egNqZlSkM9z82k/86D/nC5SRFHm1kj:8vYxZvU7DYOBz82F6raSRFG18

Score
3/10

Malware Config

Signatures

  • Unsigned PE 56 IoCs

    Checks for missing Authenticode signature.

Files

  • d9b16199bfcecc5fad40be403075512a_JaffaCakes118
    .cab
  • autologon.exe
    .exe windows:5 windows x86 arch:x86

    160b44cb685df0673e4f9626f8c25e39


    Headers

    Imports

    Sections

  • bftowdthunk.dll
    .dll windows:4 windows x86 arch:x86

    a4040eebe561bf9309698677695c458f


    Headers

    Imports

    Exports

    Sections

  • bodyacro.exe
    .exe windows:5 windows x86 arch:x86

    9c79eb4774ea530e86d380439b58f5a1


    Headers

    Imports

    Sections

  • bodyblock.exe
    .exe windows:5 windows x86 arch:x86

    68e4fb32241a0019fb89f1303d3e4446


    Headers

    Imports

    Sections

  • bodybook.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodybt.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodybtw.exe
    .exe windows:5 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • bodyburn.dll
    .dll windows:5 windows x86 arch:x86

    0dd7b7e4e5beeccb79fe69c832544cb8


    Headers

    Imports

    Exports

    Sections

  • bodyburn.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodycalc.exe
    .exe windows:5 windows x86 arch:x86

    98feaf0f8f73f7370e6122d9107f77bd


    Headers

    Imports

    Sections

  • bodyexcel.exe
    .exe windows:5 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • bodyexpl.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodyflash.exe
    .exe windows:5 windows x86 arch:x86

    1e8b80a4bc92cada81e544f1ab5b495b


    Headers

    Imports

    Sections

  • bodyimgview.exe
    .exe windows:5 windows x86 arch:x86

    888e36d0b835354ddd06e7c633a6c463


    Headers

    Imports

    Sections

  • bodyiso.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodymail.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodyminimize.exe
    .exe windows:5 windows x86 arch:x86

    21d50ab9ad92a345f01efd36c28dd1fd


    Headers

    Imports

    Sections

  • bodymobile.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodympc.exe
    .exe windows:5 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • bodynotepad.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodyoffice.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bodyoffice2000.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bodypdvd.exe
    .exe windows:5 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • bodyrecycle.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bodyscan.exe
    .exe windows:5 windows x86 arch:x86

    30eb78e4add2026b6eb071c9a0b2277a


    Headers

    Imports

    Sections

  • bodywinamp.exe
    .exe windows:5 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • bodyword.exe
    .exe windows:5 windows x86 arch:x86

    98c88d882f01a3f6ac1e5f7dfd761624


    Headers

    Imports

    Sections

  • browser.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cabarc.exe
    .exe windows:5 windows x86 arch:x86

    597a4c82b524d35adf4da7c03330ead4


    Headers

    Imports

    Sections

  • classv.exe
    .exe windows:5 windows x86 arch:x86

    d65e50b5ce424af03a67a9272770477c


    Headers

    Imports

    Sections

  • exhook.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • help.chm
    .chm
  • helper.dll
    .dll windows:5 windows x86 arch:x86

    193318e1d0f33b4efba65a89e7d96540


    Headers

    Imports

    Exports

    Sections

  • indicdll.dll
    .dll windows:5 windows x86 arch:x86

    e849a4fb4c69e579ec1b546f9edc4a93


    Headers

    Imports

    Sections

  • inj_scan.dll
    .dll windows:5 windows x86 arch:x86

    d0fcdb0c1cf5845299c3053f185f5923


    Headers

    Imports

    Sections

  • internat.exe
    .exe windows:5 windows x86 arch:x86

    6ec4b9854181010bb09f30f0c6b36520


    Headers

    Imports

    Sections

  • modem_restart.exe
    .exe windows:5 windows x86 arch:x86

    6bc531c7b6fe8bec45ee91c69da8d797


    Headers

    Imports

    Sections

  • mp.exe
    .exe windows:5 windows x86 arch:x86

    15e49c763b232840f6ff09507940ebc9


    Headers

    Imports

    Sections

  • pic_bmp.dll
    .dll windows:5 windows x86 arch:x86

    9c3885f5db671556966b8bbd73e1b1a7


    Headers

    Imports

    Exports

    Sections

  • pic_jpeg.dll
    .dll windows:5 windows x86 arch:x86

    11f88177fc21487105ca5f4aee3adc00


    Headers

    Imports

    Exports

    Sections

  • pic_png.dll
    .dll windows:5 windows x86 arch:x86

    11f88177fc21487105ca5f4aee3adc00


    Headers

    Imports

    Exports

    Sections

  • rp_shared.dll
    .dll windows:5 windows x86 arch:x86

    4dd46ab1a03f810aa68740efad8f6cba


    Headers

    Imports

    Exports

    Sections

  • rpgina.dll
    .dll windows:5 windows x86 arch:x86

    4ac1a08b2122e2fa8776494ef370e499


    Headers

    Imports

    Exports

    Sections

  • rs_api.chm
    .chm
  • rs_api.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6b98329def1184ddce407810ac966c33


    Headers

    Imports

    Exports

    Sections

  • rshell.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • rsinternal.exe
    .exe windows:5 windows x86 arch:x86

    16f6f5e776ac4149f5d0050469eec512


    Headers

    Imports

    Sections

  • rsrules.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • rsrules.exe
    .exe windows:5 windows x86 arch:x86

    c939c7dd2ac2563a8871ac7f5c8579da


    Headers

    Imports

    Sections

  • rssemaphore.exe
    .exe windows:5 windows x86 arch:x86

    31f1128040f926611191a697b3672dc6


    Headers

    Imports

    Sections

  • rsspoolcleaner.exe
    .exe windows:5 windows x86 arch:x86

    4a2ce2e4fea903428850a6db8bd7f63d


    Headers

    Imports

    Sections

  • settings.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tempdrv.exe
    .exe windows:5 windows x86 arch:x86

    cf621f0af82ae5f4161211b4ebcc4db8


    Code Sign

    Headers

    Imports

    Sections

  • tm.exe
    .exe windows:5 windows x86 arch:x86

    46ab049bfa67a99e386781d08f9f7bb4


    Headers

    Imports

    Sections

  • updatechk.exe
    .exe windows:5 windows x86 arch:x86

    932e6b3ad6b2e0db0a565bd713fda78f


    Headers

    Imports

    Sections

  • updater.exe
    .exe windows:5 windows x86 arch:x86

    54d2be848d3a28bf386b7271b13e06ca


    Headers

    Imports

    Sections

  • vstwain.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wb.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wb.exe
    .exe windows:5 windows x86 arch:x86

    85f5a7a9a3072cf5546849c0568e3d34


    Headers

    Imports

    Sections