General

  • Target

    ef23a93a7227ab6a02c100a1575e8e4a_JaffaCakes118

  • Size

    9.6MB

  • MD5

    ef23a93a7227ab6a02c100a1575e8e4a

  • SHA1

    d568357ef0106503f4175425e7f20c10e4b11f4f

  • SHA256

    7811030199c1ce752512dea51a23c75f342a505d692b39a12065d3d253b5e83c

  • SHA512

    0da8d791cd01bb5b60a3c970bc21aa0b82f58ff7eae435350a38ef00d1f548e7c37a82654edc98ac9d023afcb90ffbf345b3bb184536f783147c587d3f0d9bd6

  • SSDEEP

    196608:fDXcbtRc5C4VRsSt9hU56v5scsG00gD7K15NRejWiwNXrVnUW+qS:frytRkgSRU5wsegD7K15NRe5wNXJnGqS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • ef23a93a7227ab6a02c100a1575e8e4a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount2.dll
    .dll windows:4 windows x86 arch:x86

    795a1f93bc887fb067b2285d742f7fa0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FILEDownPlug2.dll
    .dll windows:4 windows x86 arch:x86

    1b6303fba3c09e3c12e1f0a7f2cc93ca


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IsVista.dll
    .dll windows:4 windows x86 arch:x86

    efa700f367af492674a29b601d27bd91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Linker.dll
    .dll windows:5 windows x86 arch:x86

    ce2f67d505948c06c48fe908bc73307e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserMgr.dll
    .dll windows:4 windows x86 arch:x86

    bac2b3d4a0df9a23aee940b8ecd0d168


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/gettext.dll
    .dll windows:4 windows x86 arch:x86

    afc7f45ec0ac7d42202c555f96ed7d93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisdt.dll
    .dll windows:1 windows x86 arch:x86

    aa911a57ef69e33e93666ad699a8d7be


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/seetozip.ini
  • $PLUGINSDIR/stack.dll
    .dll windows:4 windows x86 arch:x86

    55ae76a2cfe164921f566c03cfbba5ec


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/test.xml
    .xml
  • StarPDF.exe
    .exe windows:4 windows x86 arch:x86

    a0e6dbd00e660bcb9f5ef15464211947


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fpdfcjk.bin
  • lang_ko_kr.xml
  • lex/accent.tlx
  • lex/correct.tlx
  • lex/ssceam.tlx
    .vbs
  • lex/ssceam2.clx
  • lex/sscebr.tlx
    .vbs
  • lex/sscebr2.clx
  • lex/ssceca.tlx
    .vbs
  • lex/ssceca2.clx
  • lex/tech.tlx
  • lex/userdic.tlx
  • plugins/StarPDFReaderX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cd92b3730e30658cb3c25da03927b4b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/StarPDFReaderX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1e6576febdad8347a76372ff42665437


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/Uninstall.exe.nsis
  • plugins/npStarPDFReaderPlug.dll
    .dll windows:4 windows x86 arch:x86

    30246f81ed82f9963eb5115c62ea0147


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/setup_see.bmp
  • plugins/setup_zip.bmp
  • starpdfup.exe
    .exe windows:4 windows x86 arch:x86

    14d00e88fbfb4737e1eaf028638db206


    Code Sign

    Headers

    Imports

    Sections

  • startools_addpdf.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount_new.dll
    .dll windows:4 windows x86 arch:x86

    eef21a13a3a20993251273037c6620dd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • STARUpdate.exe
    .exe windows:4 windows x86 arch:x86

    13a2fe22aaafd3dd19b2f2bce5b78c7d


    Headers

    Imports

    Sections

  • uninstall.exe.nsis