General

  • Target

    da4cc7857119f58f14ebad6849c905ad_JaffaCakes118

  • Size

    17.5MB

  • MD5

    da4cc7857119f58f14ebad6849c905ad

  • SHA1

    f3a113ec3ca63d9c042abe7e65e9fa1e831c4bcd

  • SHA256

    bd75ae822853ffcc0240a9435ef0d498d69f939c08c66baf4152ff81fd2fa038

  • SHA512

    b1f2947684576139a7fd05d09e6fb363641fc3a72165c609f3ab2b3edf418c7104721ddec163cc59e8997a5f4172a2aa123cfc67f919fc5bba343b6bf55045e1

  • SSDEEP

    393216:ErPcgj2JunPrZTxaR8fEg5lQZw+lsrwARFIpuCZoc0EDa7EiAt:ErPFXlwSfEeQy+EwARFIUCycxO7At

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • da4cc7857119f58f14ebad6849c905ad_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • AutomaticUpdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NetworkAdministrator.exe
    .exe windows:5 windows x86 arch:x86

    be12f209321a3fdb266cbd914601465c


    Code Sign

    Headers

    Imports

    Sections

  • NetworkAdministratorUninstall.exe.nsis
  • Plugins/Agent32.exe
    .exe windows:5 windows x86 arch:x86

    5ee76476c5dfcac3fd6748e926a2b2be


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/Agent64.exe
    .exe windows:5 windows x64 arch:x64

    7a9d6e6c589e66b8d48154ca901cb2e7


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/AgentBuild.exe
    .exe windows:5 windows x86 arch:x86

    f193f38dac44405e3be2faeb5435f999


    Headers

    Imports

    Sections

  • Plugins/AgentCAD32.dll
    .dll windows:5 windows x86 arch:x86

    dc6e27f5aa716a4522b61b17296347ac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/AgentCAD64.dll
    .dll windows:5 windows x64 arch:x64

    4608aa82599be3d620e2ccf8749678e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/AgentHook32.dll
    .dll windows:5 windows x86 arch:x86

    8386516d8b732bdc6a0a477cc887437a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/AgentHook64.dll
    .dll windows:5 windows x64 arch:x64

    bf18844dae7c28db7add2b103237e2e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/AgentIcon.ico
  • Plugins/AgentSettings.exe
    .exe windows:5 windows x86 arch:x86

    b1b3e5e8283328c14d1d78c6f892a98b


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/AgentSetupWizard.exe
    .exe windows:5 windows x86 arch:x86

    eae438517e637ef10e3b6d28cbbaa6a2


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/AgentTray.exe
    .exe windows:5 windows x86 arch:x86

    c7c80d8732192dd51a3a931a403ed7ce


    Headers

    Imports

    Sections

  • Plugins/AgentUninstall.exe
    .exe windows:5 windows x86 arch:x86

    1777541aa28d72c85bb0f608d80c96ee


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/Auto Maximize Blocker/Plugin.XML
    .xml
  • Plugins/Auto Maximize Blocker/Script.dat
  • Plugins/AutoLogon/Plugin.XML
    .xml
  • Plugins/AutoLogon/Script.dat
  • Plugins/Automatic Update Cleanup/Plugin.XML
    .xml
  • Plugins/Automatic Update Cleanup/Script.dat
  • Plugins/Autorun Disabler/Plugin.XML
    .xml
  • Plugins/Autorun Disabler/Script.dat
  • Plugins/CD and DVD Burn Disabler/Plugin.XML
    .xml
  • Plugins/CD and DVD Burn Disabler/Script.dat
  • Plugins/CDRom Disabler/Plugin.XML
    .xml
  • Plugins/CDRom Disabler/Script.dat
  • Plugins/Change Network Configuration/Plugin.XML
    .xml
  • Plugins/Change Network Configuration/Script.dat
    .vbs
  • Plugins/Computer Description/Plugin.XML
    .xml
  • Plugins/Computer Description/Script.dat
  • Plugins/Custom/Plugin.xml
    .xml
  • Plugins/Custom/Script.dat
  • Plugins/Daylight Saving/Plugin.XML
    .xml
  • Plugins/Daylight Saving/Script.dat
  • Plugins/Defrag/Plugin.XML
    .xml
  • Plugins/Defrag/Script.dat
    .vbs
  • Plugins/Dell Service Tag Number/Plugin.XML
    .xml
  • Plugins/Dell Service Tag Number/Script.dat
    .vbs
  • Plugins/Disable Control Panel/plugin.xml
    .xml
  • Plugins/Disable Control Panel/script.dat
  • Plugins/Disable Encryption/plugin.xml
    .xml
  • Plugins/Disable Encryption/script.dat
  • Plugins/Excel Default Document Set/Plugin.XML
    .xml
  • Plugins/Excel Default Document Set/Script.dat
  • Plugins/Floppy Disabler/Plugin.XML
    .xml
  • Plugins/Floppy Disabler/Script.dat
  • Plugins/Folder Copy/Plugin.XML
    .xml
  • Plugins/Folder Copy/Script.dat
  • Plugins/Force Security Patch Install/Plugin.XML
    .xml
  • Plugins/Force Security Patch Install/script.dat
    .vbs
  • Plugins/Free Space/Plugin.XML
    .xml
  • Plugins/Free Space/Script.dat
  • Plugins/GPUpdate/Plugin.XML
    .xml
  • Plugins/GPUpdate/Script.dat
    .vbs
  • Plugins/IE Blocker/Plugin.XML
    .xml
  • Plugins/IE Blocker/Script.dat
  • Plugins/IE Delete History Block/Plugin.XML
    .xml
  • Plugins/IE Delete History Block/Script.dat
  • Plugins/Icons/Automatic Update.jpg
    .jpg
  • Plugins/Icons/CD and DVD Rom Drives.jpg
    .jpg
  • Plugins/Icons/Control Panel.jpg
    .jpg
  • Plugins/Icons/Daylight Saving.jpg
    .jpg
  • Plugins/Icons/Desktop Settings.jpg
    .jpg
  • Plugins/Icons/Drives.jpg
    .jpg
  • Plugins/Icons/Excel.jpg
    .jpg
  • Plugins/Icons/Files and Folders.jpg
    .jpg
  • Plugins/Icons/Floppy Drives.jpg
    .jpg
  • Plugins/Icons/Internet Explorer.jpg
    .jpg
  • Plugins/Icons/Network Settings.jpg
    .jpg
  • Plugins/Icons/Office.jpg
    .jpg
  • Plugins/Icons/Power Settings.jpg
    .jpg
  • Plugins/Icons/Printer.jpg
    .jpg
  • Plugins/Icons/Processes.jpg
    .jpg
  • Plugins/Icons/Real VNC.jpg
    .jpg
  • Plugins/Icons/Registry.jpg
    .jpg
  • Plugins/Icons/Remote Desktop.jpg
    .jpg
  • Plugins/Icons/Search.jpg
    .jpg
  • Plugins/Icons/Services.jpg
    .jpg
  • Plugins/Icons/System Tools.jpg
    .jpg
  • Plugins/Icons/USB Flash Drives.jpg
    .jpg
  • Plugins/Icons/User Settings.jpg
    .jpg
  • Plugins/Icons/Windows 10.jpg
    .jpg
  • Plugins/Icons/Word.jpg
    .jpg
  • Plugins/Instant Message/Plugin.XML
    .xml
  • Plugins/Instant Message/Script.dat
  • Plugins/Internet Warning Disabler/Plugin.XML
    .xml
  • Plugins/Internet Warning Disabler/Script.dat
  • Plugins/LSA Level/Plugin.XML
    .xml
  • Plugins/LSA Level/Script.dat
  • Plugins/Last Logon/Plugin.XML
    .xml
  • Plugins/Last Logon/Script.dat
    .vbs
  • Plugins/Local Administrator Set/Plugin.XML
    .xml
  • Plugins/Local Administrator Set/Script.dat
    .vbs
  • Plugins/Logon Disclaimer/Plugin.XML
    .xml
  • Plugins/Logon Disclaimer/Script.dat
  • Plugins/Logon Report/Plugin.XML
    .xml
  • Plugins/Logon Report/Script.dat
    .vbs
  • Plugins/Manage Services/Plugin.XML
    .xml
  • Plugins/Manage Services/Script.dat
  • Plugins/MirrorDriver/Install.cmd
    .cmd .vbs
  • Plugins/MirrorDriver/MirrInst32.exe
    .exe windows:5 windows x86 arch:x86

    72d884782397da76b25bcce6b033b043


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/MirrorDriver/MirrInst64.exe
    .exe windows:5 windows x64 arch:x64

    dd8026065fc02a21cf1b31740d47bb31


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/MirrorDriver/Uninstall.cmd
  • Plugins/MirrorDriver/iamirror/iamirror.cat
  • Plugins/MirrorDriver/iamirror/iamirror.inf
  • Plugins/MirrorDriver/iamirror/x64/iamirror.dll
    .dll windows:6 windows x64 arch:x64

    135cd38a5a766b38f17d7a38178ab581


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/MirrorDriver/iamirror/x64/iamirror.sys
    .sys windows:6 windows x64 arch:x64

    878dc6a54f49f007a4a2ee24100a0c20


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/MirrorDriver/iamirror/x86/iamirror.dll
    .dll windows:6 windows x86 arch:x86

    e9ceadbc928ca648f8bd6b02d6546343


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/MirrorDriver/iamirror/x86/iamirror.sys
    .sys windows:6 windows x86 arch:x86

    634ee1836913a1200c1e0fa1fce49924


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/NetRoute32.dll
    .dll windows:5 windows x86 arch:x86

    bfbee6966be8f457e64db5d924d4a0e2


    Headers

    Imports

    Exports

    Sections

  • Plugins/NetRoute64.dll
    .dll windows:5 windows x64 arch:x64

    b1756c3327b327dab30b00135f23b0ff


    Headers

    Imports

    Exports

    Sections

  • Plugins/NewAPI32.dll
    .dll windows:5 windows x86 arch:x86

    940d37554a03bc76d148dd5ebc711723


    Headers

    Imports

    Exports

    Sections

  • Plugins/NewAPI64.dll
    .dll windows:5 windows x64 arch:x64

    f0c12f5de558ea5a18052a1dd23d8c04


    Headers

    Imports

    Exports

    Sections

  • Plugins/Office 2013 Cloud Disabler/Plugin.XML
    .xml
  • Plugins/Office 2013 Cloud Disabler/Script.dat
  • Plugins/Offline Files Disabler/Plugin.XML
    .xml
  • Plugins/Offline Files Disabler/Script.dat
  • Plugins/Power Management/Plugin.XML
    .xml
  • Plugins/Power Management/PowerCfg.bat
  • Plugins/Power Management/Script.dat
  • Plugins/Print Spooler Reset/Plugin.XML
    .xml
  • Plugins/Print Spooler Reset/Script.dat
  • Plugins/Process Kill/Plugin.XML
    .xml
  • Plugins/Process Kill/Script.dat
  • Plugins/Reboot/Logoff.vbs
  • Plugins/Reboot/Plugin.XML
    .xml
  • Plugins/Reboot/Script.dat
  • Plugins/Reg File Importer/Plugin.XML
    .xml
  • Plugins/Reg File Importer/Script.dat
  • Plugins/Remote Control Distribution/Plugin.XML
    .xml
  • Plugins/Remote Control Distribution/Script.dat
  • Plugins/Remote Control Enterprise Settings/Plugin.XML
    .xml
  • Plugins/Remote Control Enterprise Settings/Script.dat
  • Plugins/Remote Control Server Documentation.url
  • Plugins/Remote Desktop Enabler/Plugin.XML
    .xml
  • Plugins/Remote Desktop Enabler/Script.dat
  • Plugins/Remote Desktop Port Set/Plugin.XML
    .xml
  • Plugins/Remote Desktop Port Set/Script.dat
  • Plugins/Remote Execute/Plugin.XML
    .xml
  • Plugins/Remote Execute/Script.dat
  • Plugins/Share Mapped Drives/Plugin.XML
    .xml
  • Plugins/Share Mapped Drives/Script.dat
  • Plugins/Temp File Cleanup/Plugin.XML
    .xml
  • Plugins/Temp File Cleanup/Script.dat
    .vbs
  • Plugins/Tools/AgentSetup.exe
    .exe windows:5 windows x86 arch:x86

    d15245e5c5a3f54b8c94d97c6f3e0f3b


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/Tools/DSTUpdate.exe
    .exe windows:5 windows x86 arch:x86

    ea6e8d36e50ad9c343ea4b85550f29de


    Headers

    Imports

    Sections

  • Plugins/Tools/DisplayError.exe
    .exe windows:5 windows x86 arch:x86

    4df386beaa542c8eb9c1141f65aa5157


    Headers

    Imports

    Sections

  • Plugins/Tools/ImportReg.bat
  • Plugins/Tools/ManageService.exe
    .exe windows:5 windows x86 arch:x86

    094eb389526a82369245c236239fb62c


    Headers

    Imports

    Sections

  • Plugins/Tools/MsgBox.exe
    .exe windows:5 windows x86 arch:x86

    543a1d91e084f69eea7f3828f6c26ad2


    Headers

    Imports

    Sections

  • Plugins/Tools/PowerUpdate.exe
    .exe windows:5 windows x86 arch:x86

    9254afbc1f048e1bfbdd67dbe4fb61a7


    Headers

    Imports

    Sections

  • Plugins/Tools/ProcessKill.exe
    .exe windows:5 windows x86 arch:x86

    0d9712735c94eaa02d53dcbc896b4e39


    Headers

    Imports

    Sections

  • Plugins/Tools/RCAgentRemove.bat
  • Plugins/Tools/RPCService.exe
    .exe windows:5 windows x86 arch:x86

    51df8fc73e87d372553e048c853734e3


    Headers

    Imports

    Sections

  • Plugins/Tools/RegistrySet.exe
    .exe windows:5 windows x86 arch:x86

    76d2432a6eb56d349e89d1dd8a3dc13a


    Headers

    Imports

    Sections

  • Plugins/Tools/RemoteExecute.exe
    .exe windows:5 windows x86 arch:x86

    89a9abbb2d54ce72a3e576e6dc353c8f


    Headers

    Imports

    Sections

  • Plugins/Tools/RemoteExecute2.exe
    .exe windows:5 windows x86 arch:x86

    a899c9291c1f275bcb383f49db7764c0


    Headers

    Imports

    Sections

  • Plugins/Tools/SystemReboot.exe
    .exe windows:5 windows x86 arch:x86

    2fd81aadfe1641aa6f843fe771e1c6d7


    Headers

    Imports

    Sections

  • Plugins/Tools/TimezoneRefresh.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/Tools/USBDisable.exe
    .exe windows:5 windows x86 arch:x86

    82cf926d2fec508c5282a04e47809fe6


    Headers

    Imports

    Sections

  • Plugins/Tools/VNCPassword.exe
    .exe windows:5 windows x86 arch:x86

    4152f6c731e122bdccec54a99ac6d4f3


    Headers

    Imports

    Sections

  • Plugins/Tools/powercfg.exe
    .exe windows:5 windows x86 arch:x86

    e260bf98bebe1fd8baece674218f0085


    Headers

    Imports

    Sections

  • Plugins/USB Device Report/Plugin.XML
    .xml
  • Plugins/USB Device Report/Script.dat
  • Plugins/USB Disabler/Plugin.XML
    .xml
  • Plugins/USB Disabler/Script.dat
  • Plugins/VNC Password Set/Plugin.XML
    .xml
  • Plugins/VNC Password Set/Script.dat
  • Plugins/Wallpaper Set/Plugin.XML
    .xml
  • Plugins/Wallpaper Set/Script.dat
  • Plugins/Windows 10 Disabler/Plugin.XML
    .xml
  • Plugins/Windows 10 Disabler/Script.dat
  • Plugins/Windows Search Settings/Plugin.XML
    .xml
  • Plugins/Windows Search Settings/Script.dat
  • Plugins/Word Default Document Set/Plugin.XML
    .xml
  • Plugins/Word Default Document Set/Script.dat
  • Plugins/prefix.bat
  • Plugins/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    ae203af973724c4f20d47874300ff971


    Headers

    Imports

    Exports

    Sections

  • Update32.dll
    .dll windows:5 windows x86 arch:x86

    8866c5436df959cad1f6a826dda5be2b


    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.