General

  • Target

    eb9837e1b4d3b1c657411c0f1e1470a4_JaffaCakes118

  • Size

    219KB

  • MD5

    eb9837e1b4d3b1c657411c0f1e1470a4

  • SHA1

    ab04f4a57b38c36be4edb04201f567849c62924a

  • SHA256

    c4a985fcbcaea511342aa44854368807d9c8f86980a5c50325c03aff84784b80

  • SHA512

    bb6e989f053be180f6b4dde0e8881fc50f3fd3183cb6cca443e69e181f8f262df5aad32b9593f7df3c2e7e36c1b65845f009021b146150c19c347b15e1035e8e

  • SSDEEP

    3072:TLk395hYXJK45+rP8FsXnRjy4wetXVvsq3RVTZPsfI6R53EUt1ZoNbqUYP/wwduT:TQqA1z8FwRjtXV1pUUg1ZoNYP/fduP/D

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • eb9837e1b4d3b1c657411c0f1e1470a4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/1clogoEZL.bmp
  • $PLUGINSDIR/1clogoFTT.bmp
  • $PLUGINSDIR/1clogobvd.bmp
  • $PLUGINSDIR/1clogoddd.bmp
  • $PLUGINSDIR/1clogowb.bmp
  • $PLUGINSDIR/EBanner.dll
    .dll windows:4 windows x86 arch:x86

    c759d72719f57a6b126c48a6fe97f6e7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IM_tb.bmp
  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WB.bmp
  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/anon.bmp
  • $PLUGINSDIR/bab.bmp
  • $PLUGINSDIR/buzz.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/fm.bmp
  • $PLUGINSDIR/inc.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sIM.bmp
  • $PLUGINSDIR/save.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/yontoo.bmp
  • $PROGRAMFILES/1ClickDownload/$PROGRAMFILES/1ClickDownload/uninst.exe.nsis