General

  • Target

    fc926a2fd18fb0a3d2d483bddb09caf5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    fc926a2fd18fb0a3d2d483bddb09caf5

  • SHA1

    d7730a968fd080cb82bda52db17d3c922addcaba

  • SHA256

    c473515105be8f2dc622d67f09d068e262c36acb527d702660b1e4e1f7107a7a

  • SHA512

    5395d21d0eed965793deb32f059260c3b112592cc29ad9eba82eb91b0587b2bcdc351ab025be7df1346580bcfe00957e81e0bb538ef78c9cbd049c5845632aa1

  • SSDEEP

    49152:CE6eXZDsAGrB0SINi5al/ny/CEpPkykYW2BsK0y6mi:d6eXZD9GSSV4l/9EpP/JWksuNi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fc926a2fd18fb0a3d2d483bddb09caf5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    73b73e00f465fa1a2a3bf6377a40219b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bin/bat/netstat.bat
  • bin/bat/ping.bat
  • bin/dll/SysTray.dll
    .dll windows:4 windows x86 arch:x86

    f0639ea316a0aa3aba1acfdbbc59b832


    Headers

    Imports

    Exports

    Sections

  • bin/dll/amp_in.dll
    .dll windows:4 windows x86 arch:x86

    31a78ca4c5719a55b0d6e9a65fd44551


    Headers

    Imports

    Exports

    Sections

  • bin/dll/dmu.dll
    .dll windows:4 windows x86 arch:x86

    f44e7902de93422f6057266322d0fc34


    Headers

    Imports

    Exports

    Sections

  • bin/dll/in_midi.dll
    .dll windows:4 windows x86 arch:x86

    3b1bd3a34a32fed19e804aa9af06720c


    Headers

    Imports

    Exports

    Sections

  • bin/dll/in_mp3.dll
    .dll windows:4 windows x86 arch:x86

    f2ed855cfb1b511dcbbe9f7cfe706c2e


    Headers

    Imports

    Exports

    Sections

  • bin/dll/in_wave.dll
    .dll windows:4 windows x86 arch:x86

    5e5e2b1b84a649be4bc49dd0e19198c9


    Headers

    Imports

    Exports

    Sections

  • bin/dll/in_wm.dll
    .dll windows:4 windows x86 arch:x86

    8af71b588334d03f1d036cf38437174c


    Headers

    Imports

    Exports

    Sections

  • bin/dll/mUnzip.dll
    .dll windows:4 windows x86 arch:x86

    33983d265d1afe0720ac79ded911a322


    Headers

    Imports

    Exports

    Sections

  • bin/dll/mircustom.dll
    .dll windows:4 windows x86 arch:x86

    21e7c14b58ffd404231ffba20358bd61


    Headers

    Imports

    Exports

    Sections

  • bin/dll/moo.dll
    .dll windows:4 windows x86 arch:x86

    7489094d46c514f122167d4c488c647e


    Headers

    Imports

    Exports

    Sections

  • bin/dll/nGZIPn.dll
    .dll windows:4 windows x86 arch:x86

    1a802beda799480cdfcedf4c5ecad917


    Headers

    Imports

    Exports

    Sections

  • bin/dll/nHTMLn_2.95.dll
    .dll windows:4 windows x86 arch:x86

    0a1f3160b852737d51568d1c50e67bdf


    Headers

    Imports

    Exports

    Sections

  • bin/dll/out_wave.dll
    .dll windows:4 windows x86 arch:x86

    e35ed28ff3d6ffbe9c7306635bde7854


    Headers

    Imports

    Exports

    Sections

  • bin/dll/popups.dll
    .dll windows:4 windows x86 arch:x86

    3a10814cb4c1ecb8f052f0ca2be9a655


    Headers

    Imports

    Exports

    Sections

  • bin/dll/tbwin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bin/grc/gamersirc.grc
    .js
  • bin/grc/ownscripts.grc
  • bin/grc/startup.grc
    .js
  • bin/ini/aliases.ini
    .js
  • bin/ini/balloon.ini
  • bin/ini/blacklist.ini
  • bin/ini/channels.ini
  • bin/ini/fsbanner.ini
  • bin/ini/fsdrinkseng.ini
  • bin/ini/fsdrinksger.ini
  • bin/ini/fsgreetingseng.ini
  • bin/ini/fsgreetingsger.ini
  • bin/ini/fsloveeng.ini
  • bin/ini/fsloveger.ini
  • bin/ini/fsoperatoreng.ini
  • bin/ini/fsoperatorger.ini
  • bin/ini/fsowneng.ini
  • bin/ini/fsownger.ini
  • bin/ini/fspictureseng.ini
  • bin/ini/fspicturesger.ini
  • bin/ini/fssmilieseng.ini
  • bin/ini/fssmiliesger.ini
  • bin/ini/fswareng.ini
  • bin/ini/fswarger.ini
  • bin/ini/mp3player.ini
  • bin/ini/perform.ini
  • bin/ini/popups.ini
  • bin/ini/protections.ini
  • bin/ini/servers.ini
  • bin/ini/shortcuts.ini
  • bin/ini/toolbar.ini
  • bin/ini/topics01eng.ini
  • bin/ini/topics01ger.ini
  • bin/ini/topics02eng.ini
  • bin/ini/topics02ger.ini
  • bin/ini/urls.ini
  • bin/ini/var.ini
  • bin/kte/KThmEdit.Readme.txt
  • bin/kte/Kte-Data.dat
  • bin/kte/Kte-DefTheme.dat
  • bin/kte/Kte-Dyn.dat
    .js
  • bin/kte/Kte-Dyn.mrc
    .js
  • bin/kte/Kte-Readme.txt
  • bin/kte/Kte-Restore.dat
  • bin/kte/Kte-Theme.dat
  • bin/kte/Kte.dll
    .dll windows:4 windows x86 arch:x86

    fe75c3b58aea32a38c115c48a9d3eff8


    Headers

    Imports

    Exports

    Sections

  • bin/kte/MiscStruct.dat
  • bin/kte/ThemeStruct.dat
  • bin/kte/kte.mrc
    .js
  • bin/kte/kthmedit.mrc
    .js
  • bin/lng/english.lng
  • bin/lng/german.lng
  • bin/lng/us-english.lng
  • bin/mdx/BARS.MDX
    .dll windows:4 windows x86 arch:x86

    99eee5c933b3e274b3f9aa164c57762c


    Headers

    Imports

    Exports

    Sections

  • bin/mdx/CTL_GEN.MDX
    .dll windows:4 windows x86 arch:x86

    36f31ad565ef7d1c14a9e5b079ac75ff


    Headers

    Imports

    Exports

    Sections

  • bin/mdx/MDX.DLL
    .dll windows:4 windows x86 arch:x86

    34b86dab5c0b41a24220fe3732aef3a1


    Headers

    Imports

    Exports

    Sections

  • bin/mdx/VIEWS.MDX
    .dll windows:4 windows x86 arch:x86

    07056cc36c129798d605c78512f748e3


    Headers

    Imports

    Exports

    Sections

  • bin/mdx/dialog.mdx
    .dll windows:4 windows x86 arch:x86

    252fa339fb91c0295d5e0b214a533f22


    Headers

    Imports

    Exports

    Sections

  • bin/txt/awayreason.txt
  • bin/txt/file.txt
  • bin/txt/fsmotd.txt
  • bin/txt/lcmdeng.txt
  • bin/txt/lcmdger.txt
  • bin/txt/qcmdeng.txt
  • bin/txt/qcmdger.txt
  • ircintro.hlp
  • media/affiliates.html
    .html
  • media/credits.html
    .html
  • media/faqeng.html
    .html
  • media/faqger.html
    .html
  • media/games/Helico/Helico.mrc
    .vbs
  • media/games/Helico/Readme.txt
  • media/games/Helico/helicoscore.hash
  • media/games/Helico/help.txt
  • media/games/Helico/img/Helico Chipset.bmp
  • media/games/Helico/img/sky.bmp
  • media/games/Helico/liesmich.txt
  • media/games/Helico/sounds/sound1.wav
  • media/games/Helico/sounds/sound3.wav
  • media/games/asteroids/asteroids.exe
    .exe windows:4 windows x86 arch:x86

    07193340eb6b437d05a3b3b65576ef75


    Headers

    Imports

    Sections

  • media/games/asteroids/liesmich.txt
  • media/games/asteroids/readme.txt
  • media/games/ball/ball.BMP
  • media/games/ball/readme.txt
  • media/games/ball/target.bmp
  • media/games/memory/memory.exe
  • media/games/mouse/readme.txt
  • media/games/mouse/target.bmp
  • media/games/pug/liesmich.txt
  • media/games/pug/pug.grc
    .vbs
  • media/games/pug/readme.txt
  • media/games/snake/glut32.dll
    .dll windows:4 windows x86 arch:x86

    8ac6c27b4cd79d8e045470b409980abf


    Headers

    Imports

    Exports

    Sections

  • media/games/snake/readme.txt
  • media/games/snake/snake.cpp
  • media/games/snake/snake.exe
    .exe windows:4 windows x86 arch:x86

    4b11070b5bc47dbb19014967922a78de


    Headers

    Imports

    Sections

  • media/games/tanks/liesmich.txt
  • media/games/tanks/readme.txt
  • media/games/tanks/tanks.bmp
  • media/games/tanks/tanks.mrc
  • media/games/tanks/tanks.txt
  • media/games/tanks/tanks_code.txt
    .js
  • media/games/tanks/tanksg1.wav
  • media/games/tanks/tanksg2.wav
  • media/games/tanks/tanksh1.wav
  • media/games/tanks/tanksh2.wav
  • media/games/wormwar/liesmich.txt
  • media/games/wormwar/readme.txt
  • media/games/wormwar/wormwar.mrc
    .js
  • media/games/wormwar/wormwar.txt
  • media/gfx/about/alessandro.jpg
    .jpg
  • media/gfx/about/joerg.jpg
    .jpg
  • media/gfx/about/jonas.jpg
    .jpg
  • media/gfx/about/sven.jpg
    .jpg
  • media/gfx/affiliates/ckras.gif
    .gif
  • media/gfx/affiliates/opensource.png
    .png
  • media/gfx/affiliates/pcaction.gif
    .gif
  • media/gfx/affiliates/pmnetwork.jpg
    .jpg
  • media/gfx/affiliates/unitedservers.gif
    .gif
  • media/gfx/balloon.png
    .png
  • media/gfx/html/bg.png
    .png
  • media/gfx/html/confoolef.png
    .png
  • media/gfx/html/confoomid.png
    .png
  • media/gfx/html/confoorig.png
    .png
  • media/gfx/html/conhealef.png
    .png
  • media/gfx/html/conheamid.png
    .png
  • media/gfx/html/conhearig.png
    .png
  • media/gfx/html/conmid.png
    .png
  • media/gfx/html/crelef.png
    .png
  • media/gfx/html/cremid.png
    .png
  • media/gfx/html/crerig.png
    .png
  • media/gfx/icon.ico
  • media/gfx/ncprev.bmp
  • media/gfx/quakenetlogo.jpg
    .jpg
  • media/gfx/setup.png
    .png
  • media/gfx/toolbar.bmp
  • media/gfx/tools/alarmtimer.jpg
    .jpg
  • media/gfx/tools/awaysystem.jpg
    .jpg
  • media/gfx/tools/blacklist.jpg
    .jpg
  • media/gfx/tools/cwsearch.jpg
    .jpg
  • media/gfx/tools/google.jpg
    .jpg
  • media/gfx/tools/ip2nick.jpg
    .jpg
  • media/gfx/tools/kte.jpg
    .jpg
  • media/gfx/tools/lagbar.jpg
    .jpg
  • media/gfx/tools/logview.jpg
    .jpg
  • media/gfx/tools/minigames.jpg
    .jpg
  • media/gfx/tools/mp3player.jpg
    .jpg
  • media/gfx/tools/nickchange.jpg
    .jpg
  • media/gfx/tools/nickcomp.jpg
    .jpg
  • media/gfx/tools/pug-default.JPG
    .jpg
  • media/gfx/tools/pug.JPG
    .jpg
  • media/gfx/tools/quotes.jpg
    .jpg
  • media/gfx/tools/stats.jpg
    .jpg
  • media/gfx/tools/sysinfo.jpg
    .jpg
  • media/gfx/tools/token.jpg
    .jpg
  • media/license.html
    .html
  • media/link.url
    .url
  • media/opensourceeng.html
    .html
  • media/opensourceger.html
    .html
  • media/qrequesteng.html
    .html
  • media/qrequestger.html
    .html
  • media/sfx/alarm.wav
  • media/sfx/connect.wav
  • media/sfx/dccsend.wav
  • media/sfx/query.wav
  • media/style.css
  • media/vhistoryeng.html
    .html
  • media/vhistoryger.html
    .html
  • mirc.exe
    .exe windows:4 windows x86 arch:x86

    bcad26832962a299c99085dbf5617031


    Headers

    Imports

    Sections

  • mirc.hlp
  • mirc.ini
  • perform.ini
  • readme.txt
  • themes/bitchx/BitchX.mts
  • themes/bitchx/bx.mrc
    .js
  • themes/blue/Blue.mts
  • themes/blue/blue.mrc
    .js
  • themes/calmblue/Calm Blue.mts
  • themes/calmblue/calmblue.mrc
    .js
  • themes/dark/Dark.mts
  • themes/dark/dark.mrc
  • themes/edge/README.txt
  • themes/edge/Thumbs.db
  • themes/edge/bg.png
    .png
  • themes/edge/bright.fon
  • themes/edge/edge.mrc
    .js
  • themes/edge/edge.mts
  • themes/edge/ibmpc.fon
  • themes/edge/status.png
    .png
  • themes/fire/BGchan.jpg
    .jpg
  • themes/fire/BGchan2.jpg
    .jpg
  • themes/fire/Fire.mts
  • themes/fire/Thumbs.db
  • themes/fractal/Fractal.mts
  • themes/fractal/fr-imgchan.png
    .png
  • themes/fractal/fractal.mrc
  • themes/greyworld/GreyWorld.mts
  • themes/greyworld/Thumbs.db
  • themes/greyworld/start.png
    .png
  • themes/popua/Popua.mts
  • themes/popua/pa.mrc
  • themes/rusticash/Rash.mrc
  • themes/rusticash/Rustic Ash.mts
  • themes/slug/Slug.mts
  • themes/slug/slug.mrc
  • themes/unnamed/Unnamed.mts
  • themes/unnamed/unnamed.mrc
  • themes/whitestar/WhiteStar.mts
  • themes/whitestar/start.png
    .png
  • themes/zer0x/Zer0x.mts
  • themes/zer0x/zero.mrc
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    73b73e00f465fa1a2a3bf6377a40219b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • versions.txt