General

  • Target

    e232489e42c07a3c8583652151109496_JaffaCakes118

  • Size

    7.5MB

  • MD5

    e232489e42c07a3c8583652151109496

  • SHA1

    0e1fda4bc4353fbcad7a22a0de84a8981286e65a

  • SHA256

    093124eeed587259ffa10e56cf74ef021d651fdfc8fce069cc92c7d401ea9945

  • SHA512

    a712119f18cc51b0e80a0602c2b9a83564e515dd2dced3174105d27c6ec34c4ff88c087fe7f6deab1dd112fc17dfae5ea204ba19293c9e55c88c97ea3ecbb5b4

  • SSDEEP

    196608:NsA0V0seHmXdHD+lCL9ecwxlVfDFdFRGu6h6NW0:Nsr0srD+lCLwPLhguj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • e232489e42c07a3c8583652151109496_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • DELVLib.dll
    .dll windows:5 windows x86 arch:x86

    dfa62b9401f7bb7ac7f36745a9d2bcb4


    Headers

    Imports

    Exports

    Sections

  • _cid/KPA_API.dat
  • _cid/KPD_API.dat
  • _cid/KTOpenAPI.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    0b5993f155951237a0a03e8f7a7677e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • _cid/KTPAddr.dll
    .dll windows:5 windows x86 arch:x86

    77deefe826d27e32fe164138c9bf66bb


    Headers

    Imports

    Exports

    Sections

  • _cid/KTPData.dll
    .dll windows:5 windows x86 arch:x86

    4a824c13b150b04b73dc977078b530eb


    Headers

    Imports

    Exports

    Sections

  • _cid/KTPSock.dll
    .dll windows:5 windows x86 arch:x86

    7ab04a3c6ae0f03044a8ccd111093024


    Headers

    Imports

    Exports

    Sections

  • appl.exe
    .exe windows:4 windows x86 arch:x86

    62f205fe3d5e06c190cbad78ac9b9e4e


    Headers

    Imports

    Sections

  • appl.fls
  • appl.ini
  • chck.exe
    .exe windows:4 windows x86 arch:x86

    62f205fe3d5e06c190cbad78ac9b9e4e


    Headers

    Imports

    Sections

  • libjcc.dll
    .dll windows:4 windows x86 arch:x86

    98596f3e5d37e9c19b26b7b51d9ef9fd


    Headers

    Imports

    Exports

    Sections

  • libw.pbd
  • mang.pbd
  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • ntwdblib.dll
    .dll windows:4 windows x86 arch:x86

    37855c2072e6d78d9418231bfc6f6b99


    Headers

    Imports

    Exports

    Sections

  • pbdwe90.dll
    .dll windows:4 windows x86 arch:x86

    9798a64cf49f5c0685e7495494887d11


    Headers

    Imports

    Exports

    Sections

  • pbmss90.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    431a7249710495af97317169bd47d2c1


    Headers

    Imports

    Exports

    Sections

  • pbvm90.dll
    .dll windows:4 windows x86 arch:x86

    488a02bfb552cd3f3de7ad4be6b3e52c


    Headers

    Imports

    Exports

    Sections

  • snd_.wav
  • snd_.wav
  • snd_Ϸ.wav
  • snd_.wav
  • snd_.wav
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • wkcid.pbd
  • wkpos.pbd
  • work0.pbd
  • work1.pbd
  • work1a.pbd
  • work2.pbd
  • work2a.pbd
  • work3.pbd
  • work4.pbd
  • work5.pbd
  • work6.pbd