General

  • Target

    ebbc2841a3427380fd1cab98281dbd09_JaffaCakes118

  • Size

    1005KB

  • MD5

    ebbc2841a3427380fd1cab98281dbd09

  • SHA1

    7e129d7448c618f98b33af1538c3bc9e5d389f56

  • SHA256

    c86d152b67ef80a4fb47e7e181bcdb67c07eca1eacdb7eb229a3702a69e32659

  • SHA512

    011ee0633ab29505e168f59cc5ed19a07b82c3646fe82e77f8314c669727a302accad4f1277e0b8bf992aa58586fb39c12f86f3687408820c3f21f2f112f5c87

  • SSDEEP

    12288:GpM8yGt81PRPh+6h+u/XEqCov5q/DQqRRwVVxaMbx6kBGGAh4lM77P0FM4iRN+Il:Gpbep3+Zu/lv568ND4Y0gMP1RZBdgE9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • ebbc2841a3427380fd1cab98281dbd09_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b1a57b635b23ffd553b3fd1e0960b2bd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    738dc9bb91549f627cf1953c2000e1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    ea9b3ea5cd9e2014ad3724e31f62cf5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • config.dll
    .dll windows:5 windows x86 arch:x86

    bf9dd5dfdcdd67691c400635d57d3924


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • dwh_wqeqd.exe
    .exe windows:5 windows x86 arch:x86

    2ce3a028f67b8cd50455db6ac7115c66


    Code Sign

    Headers

    Imports

    Sections

  • iconAnimate.exe
    .exe windows:5 windows x86 arch:x86

    b4b50f01529bb76779ed95a70fbeb1eb


    Code Sign

    Headers

    Imports

    Sections

  • iconTips.exe
    .exe windows:5 windows x86 arch:x86

    84cd1ddf0ce9c6a74d331bc445074f42


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    b76363e9cb88bf9390860da8e50999d2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WizModernImage.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    f03b2bab186574d8892d3d73fa9fd3fd


    Headers

    Imports

    Exports

    Sections