General

  • Target

    fb34557a1f9d7f5116530557d84a966a_JaffaCakes118

  • Size

    10.9MB

  • MD5

    fb34557a1f9d7f5116530557d84a966a

  • SHA1

    690a464912bf02154e90555c3c952e0f77566bac

  • SHA256

    c6bbeb42a31dc408ed91227e51d1e170fcbee1fb4d18854945139028103faa04

  • SHA512

    2456598178104406cdbb84eb92d37fc459e4e620884cbf2775c64b5b89706823b3119677674c9e0b2b8bbe8d6d5f1d58935a269e64fffdc12f10853c4a2cc8b2

  • SSDEEP

    196608:Wr6p6pagJdpiA8/OwFacGvTtfngvblAWlHWilDmJ89ibYIje4opol69NLKmbg2+y:kbw/ON55fUjWiM6CvliLKb2iL/gRY/Un

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fb34557a1f9d7f5116530557d84a966a_JaffaCakes118
    .zip
  • 155ɫվ.url
    .url
  • Linezer0.nfo
  • Lz0/keymaker.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • classroomspypro.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DcryptDll.dll
    .dll windows:4 windows x86 arch:x86

    5e1d3f49e5b7590e18325930cd3084f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InitialDialog.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleSC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/nlcspro/LICENCE_nlvs.txt
  • $SYSDIR/nlcspro/csagtpro.exe.dat
  • $SYSDIR/nlcspro/csagtproconfig.exe
    .exe windows:4 windows x86 arch:x86

    bab798362d5c3056d7c750e101604769


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/nlcspro/csagtprosvc.exe.dat
  • $SYSDIR/nlcspro/csprohk.dll
    .dll windows:4 windows x86 arch:x86

    938b37df516e90cd535c6402d94b80e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/nlcspro/cspromg.exe
    .exe windows:4 windows x86 arch:x86

    26ca6b3723c06dc2e9db7e8d14a7a9af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/nlcspro/mencoder.exe
    .exe windows:4 windows x86 arch:x86

    957e55ee837deda5785384eea0808691


    Code Sign

    Headers

    Imports

    Sections

  • $SYSDIR/nlcspro/mencoder_Copyright.txt
  • $SYSDIR/nlcspro/mencoder_LICENSE.txt
  • $SYSDIR/nlcspro/nlvs.exe
    .exe windows:4 windows x86 arch:x86

    0355eea2f6a3387bb5343847bae41257


    Code Sign

    Headers

    Imports

    Sections

  • $SYSDIR/nlcspro/psapi.dll
    .dll windows:5 windows x86 arch:x86

    976360032e50620712de94538beb6f31


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/nlcspro/sendsas.exe
    .exe windows:4 windows x86 arch:x86

    5b2a1593890aaadfce594cf5b8f4f63b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LICENSE_PRO.TXT
  • README_PRO.TXT
  • bin/CSPro.chm
    .chm
  • bin/LICENCE_nlvs.txt
  • bin/csagtpro.exe.dat
  • bin/csagtproconfig.exe
    .exe windows:4 windows x86 arch:x86

    bab798362d5c3056d7c750e101604769


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/csagtprosvc.exe.dat
  • bin/cspro.exe
    .exe windows:4 windows x86 arch:x86

    0cf4ea28b2e8dd60b8d3c3bdc8b429de


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/csprohk.dll
    .dll windows:4 windows x86 arch:x86

    938b37df516e90cd535c6402d94b80e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/cspromg.exe
    .exe windows:4 windows x86 arch:x86

    26ca6b3723c06dc2e9db7e8d14a7a9af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/csprorc.exe
    .exe windows:4 windows x86 arch:x86

    dc1e0895ee86708cc02ce2e62bbf0b71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/mencoder.exe
    .exe windows:4 windows x86 arch:x86

    957e55ee837deda5785384eea0808691


    Code Sign

    Headers

    Imports

    Sections

  • bin/mencoder_Copyright.txt
  • bin/mencoder_LICENSE.txt
  • bin/nlcspro/LICENCE_nlvs.txt
  • bin/nlcspro/csagtpro.exe.dat
  • bin/nlcspro/csagtprosvc.exe.dat
  • bin/nlcspro/csprohk.dll
    .dll windows:4 windows x86 arch:x86

    938b37df516e90cd535c6402d94b80e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/nlcspro/cspromg.exe
    .exe windows:4 windows x86 arch:x86

    26ca6b3723c06dc2e9db7e8d14a7a9af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/nlcspro/mencoder.exe
    .exe windows:4 windows x86 arch:x86

    957e55ee837deda5785384eea0808691


    Code Sign

    Headers

    Imports

    Sections

  • bin/nlcspro/mencoder_Copyright.txt
  • bin/nlcspro/mencoder_LICENSE.txt
  • bin/nlcspro/nlvs.exe
    .exe windows:4 windows x86 arch:x86

    0355eea2f6a3387bb5343847bae41257


    Code Sign

    Headers

    Imports

    Sections

  • bin/nlcspro/sendsas.exe
    .exe windows:4 windows x86 arch:x86

    5b2a1593890aaadfce594cf5b8f4f63b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/nlvs.exe
    .exe windows:4 windows x86 arch:x86

    0355eea2f6a3387bb5343847bae41257


    Code Sign

    Headers

    Imports

    Sections

  • bin/psapi.dll
    .dll windows:5 windows x86 arch:x86

    976360032e50620712de94538beb6f31


    Headers

    Imports

    Exports

    Sections

  • bin/sendsas.exe
    .exe windows:4 windows x86 arch:x86

    5b2a1593890aaadfce594cf5b8f4f63b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis
  • file_id.diz