General

  • Target

    dc3126c76c2d8ae142f71b15a5dfd7d1_JaffaCakes118

  • Size

    2.9MB

  • MD5

    dc3126c76c2d8ae142f71b15a5dfd7d1

  • SHA1

    45fa63ca708677c19392b23283b8de0a04f4e1f6

  • SHA256

    b684d7b94d15a92fc72447b87e2d95763dea4c0e091f696ddf6676c62d56fc36

  • SHA512

    c1a4a63c6abba8d42fac6a291a490a14a7c220bf78b066673c204fe42f0210cc412d7eafae054b59df703ea52fe3bb3f86f9d16d5b13700fa76dfff55c992d9d

  • SSDEEP

    49152:P83TEd039VC0V/L3+g4jY6vuEJzEoU6JSQ9DiaM7RWXWCUMmgDwMdo5MJ/yOrVxa:P8jr39Y053+gszGqooU6wQ9DBM7UXVpy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 60 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • dc3126c76c2d8ae142f71b15a5dfd7d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:4 windows x86 arch:x86

    2dfc6a992d004b736e85c64219a88b4a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/g/PRFA-Chrome.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Headers

    Imports

    Sections

  • $TEMP/googleupdatesetup.exe
    .exe windows:4 windows x86 arch:x86

    63bb56059f7b9f6184ab7901f4ba2948


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/g/PRFA-IEToolbar.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $TEMP/googletoolbarinstaller_stub_signed.exe
    .exe windows:4 windows x86 arch:x86

    885edb24c61979a6b60a1ea02c591f7b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/g/gcapi_dll.dll
    .dll windows:4 windows x86 arch:x86

    b6347f7361c3590fc5fbc4f49eccd01f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/g/gtapi_signed.dll
    .dll windows:4 windows x86 arch:x86

    7ffe854b1d056041e067b211f52d2336


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/g/gtb/toolbar.html
  • $PLUGINSDIR/g/pfLC.exe
    .exe windows:4 windows x86 arch:x86

    38d98a633129ed91a9f15fa60987686e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    8773e19ae02f331332db1b00671fdecf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • CCleaner.exe
    .exe windows:4 windows x86 arch:x86

    657362102b3b71495e894aac8e405834


    Code Sign

    Headers

    Imports

    Sections

  • CCleaner64.exe
    .exe windows:4 windows x64 arch:x64

    20e48acb512889b90a44d8b1260282c7


    Code Sign

    Headers

    Imports

    Sections

  • Lang/lang-1025.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1026.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1027.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1028.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1029.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1030.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1031.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1032.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1034.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1035.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1036.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1037.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1038.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1040.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1041.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1042.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1043.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1044.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1045.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1046.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1048.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1049.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1050.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1051.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1052.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1053.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1055.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1058.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1059.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1060.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1061.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1063.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1065.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1066.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1067.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1068.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1071.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1079.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-1110.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-2052.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-2070.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-2074.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-3098.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-5146.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lang/lang-9999.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections