General

  • Target
    f9daf9075d1c85e330703ec0dae7119f_JaffaCakes118
  • Size 995KB
  • Sample240927-gr5abaycjp
  • SHA256 07008bf1d066ca66058ca362205075c855355acf0519b6445d51da320ae8f899
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

File Explorer

  • f9daf9075d1c85e330703ec0dae7119f_JaffaCakes118
    .exe 995KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/modern-header.bmp
    8KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • License.rtf
    .rtf 4KB
  • Locales/Arabic/help.txt
    2KB
  • Locales/Arabic/lang.json
    10KB
  • Locales/Bulgarian/help.txt
    3KB
  • Locales/Bulgarian/lang.json
    12KB
  • Locales/Chinese (Simplified)/help.txt
    1KB
  • Locales/Chinese (Simplified)/lang.json
    8KB
  • Locales/Chinese (Traditional)/help.txt
    1KB
  • Locales/Chinese (Traditional)/lang.json
    8KB
  • Locales/Czech/help.txt
    1KB
  • Locales/Czech/lang.json
    9KB
  • Locales/Danish/help.txt
    1KB
  • Locales/Danish/lang.json
    8KB
  • Locales/Dutch/help.txt
    1KB
  • Locales/Dutch/lang.json
    9KB
  • Locales/English/help.txt
    1KB
  • Locales/English/lang.json
    8KB
  • Locales/Farsi/help.txt
    2KB
  • Locales/Farsi/lang.json
    11KB
  • Locales/Finnish/help.txt
    1KB
  • Locales/Finnish/lang.json
    9KB
  • Locales/French/help.txt
    2KB
  • Locales/French/lang.json
    10KB
  • Locales/German/help.txt
    2KB
  • Locales/German/lang.json
    9KB
  • Locales/Greek/help.txt
    3KB
  • Locales/Greek/lang.json
    14KB
  • Locales/Hebrew/help.txt
    2KB
  • Locales/Hebrew/lang.json
    10KB
  • Locales/Hungarian/help.txt
    2KB
  • Locales/Hungarian/lang.json
    10KB
  • Locales/Italian/help.txt
    2KB
  • Locales/Italian/lang.json
    10KB
  • Locales/Japanese/help.txt
    2KB
  • Locales/Japanese/lang.json
    10KB
  • Locales/Korean/help.txt
    2KB
  • Locales/Korean/lang.json
    9KB
  • Locales/Latvian.zip
    .zip 4KB
  • Latvian/help.txt
    2KB
  • Latvian/lang.json
    9KB
  • Locales/Latvian/help.txt
    2KB
  • Locales/Latvian/lang.json
    9KB
  • Locales/Polish/help.txt
    2KB
  • Locales/Polish/lang.json
    9KB
  • Locales/Portuguese (Brazilian)/help.txt
    1KB
  • Locales/Portuguese (Brazilian)/lang.json
    10KB
  • Locales/Portuguese (Europian)/help.txt
    1KB
  • Locales/Portuguese (Europian)/lang.json
    10KB
  • Locales/Romanian/help.txt
    1KB
  • Locales/Romanian/lang.json
    9KB
  • Locales/Russian/help.txt
    3KB
  • Locales/Russian/lang.json
    13KB
  • Locales/Serbian/help.txt
    2KB
  • Locales/Serbian/lang.json
    11KB
  • Locales/Slovak/help.txt
    1KB
  • Locales/Slovak/lang.json
    9KB
  • Locales/Slovenian.zip
    .zip 3KB
  • Slovenian/help.txt
    1KB
  • Slovenian/lang.json
    9KB
  • Locales/Slovenian/help.txt
    1KB
  • Locales/Slovenian/lang.json
    9KB
  • Locales/Spanish/help.txt
    2KB
  • Locales/Spanish/lang.json
    9KB
  • Locales/Swedish/help.txt
    1KB
  • Locales/Swedish/lang.json
    9KB
  • Locales/Turkish/help.txt
    1KB
  • Locales/Turkish/lang.json
    9KB
  • Locales/Ukrainian/help.txt
    3KB
  • Locales/Ukrainian/lang.json
    13KB
  • Locales/Uyghur/help.txt
    3KB
  • Locales/Uyghur/lang.json
    13KB
  • Locales/Vietnamese/help.txt
    1KB
  • Locales/Vietnamese/lang.json
    10KB
  • Plugins/History/Csv.js
    439B
  • Plugins/History/Html.js
    984B
  • Plugins/History/Json.js
    .js 753B
  • Plugins/History/Txt.js
    381B
  • QTranslate.exe
    .exe 1.6MB
  • Resources/XdxfArticle.xslt
    832B
  • Services/ABBYY Lingvo Live/Service.ico
    894B
  • Services/ABBYY Lingvo Live/Service.js
    .js 1KB
  • Services/Babylon Dictionary/Service.ico
    1KB
  • Services/Babylon Dictionary/Service.js
    1KB
  • Services/Babylon/Service.ico
    1KB
  • Services/Babylon/Service.js
    .js 1KB
  • Services/Baidu/Service.ico
    1KB
  • Services/Baidu/Service.js
    .js 3KB
  • Services/Common.js
    .js 5KB
  • Services/DeepL/Service.ico
    1KB
  • Services/DeepL/Service.js
    .js 2KB
  • Services/Google Search/Service.ico
    1KB
  • Services/Google Search/Service.js
    .js 1KB
  • Services/Google Translate/Service.ico
    1KB
  • Services/Google Translate/Service.js
    .js 3KB
  • Services/ImTranslator/Service.ico
    1KB
  • Services/ImTranslator/Service.js
    1KB
  • Services/Microsoft Translator/Service.ico
    1KB
  • Services/Microsoft Translator/Service.js
    .js 2KB
  • Services/Multitran/Service.ico
    1KB
  • Services/Multitran/Service.js
    .js 1KB
  • Services/Naver/Service.ico
    1KB
  • Services/Naver/Service.js
    .js 3KB
  • Services/Oxford Learner Dictionary/Service.ico
    1KB
  • Services/Oxford Learner Dictionary/Service.js
    .js 3KB
  • Services/Promt/Service.ico
    1KB
  • Services/Promt/Service.js
    1KB
  • Services/Reverso/Service.ico
    1KB
  • Services/Reverso/Service.js
    .js 1KB
  • Services/Urban Dictionary/Service.ico
    1KB
  • Services/Urban Dictionary/Service.js
    .js 1KB
  • Services/Wikipedia/Service.ico
    318B
  • Services/Wikipedia/Service.js
    .js 1KB
  • Services/WordReference/Service.ico
    1KB
  • Services/WordReference/Service.js
    .js 1KB
  • Services/Yandex/Service.ico
    1KB
  • Services/Yandex/Service.js
    .js 4KB
  • Services/youdao/Service.ico
    1KB
  • Services/youdao/Service.js
    .js 3KB
  • Themes/Blue.json
    1KB
  • Themes/Brackets.json
    2KB
  • Themes/Flat Dark.json
    1KB
  • Themes/Holo Dark.json
    2KB
  • Themes/Holo Light.json
    2KB
  • Themes/Metro.json
    1KB
  • Themes/Outlook Gray.json
    1KB
  • Themes/Photoshop Dark.json
    2KB
  • Uninstall.exe
    .exe 68KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/modern-header.bmp
    8KB
  • bass.dll
    .dll 125KB

f9daf9075d1c85e330703ec0dae7119f_JaffaCakes118

  • IMPHASH 4f67aeda01a0484282e8c59006b0b352
  • SHA256 07008bf1d066ca66058ca362205075c855355acf0519b6445d51da320ae8f899
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12843
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths