General

  • Target

    ff803ff8b906b44c29302b9131dac6f1_JaffaCakes118

  • Size

    12.7MB

  • MD5

    ff803ff8b906b44c29302b9131dac6f1

  • SHA1

    f206f0de37371035bafc90f19115f21f056c849c

  • SHA256

    73c21512665632e97affed38d85636b0047017033652217615a87df88318d9f2

  • SHA512

    50325bc3dd0c16cb03ab10edb9d283d9f8d841ae9ab3cc4be15ea5f309dabe60e29ee17259f6c1a2a5f15cee8748990f72f9c634ae883665e3794618a7be3052

  • SSDEEP

    393216:F2NgBz6csTVIa05emui7qh+NVZvddGWXhBlEhFx:wOxkTl/YlaWlEhFx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • ff803ff8b906b44c29302b9131dac6f1_JaffaCakes118
    .zip
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/DersonetWA.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/DersonetWA.exe.config
    .xml
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/DersonetWA.exe.manifest
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Dersonet_Excel_Ogrenci_Aktarim.xlsx
    .xlsx office2007
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_KTT_IO_OMR98.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_KTT_LISE_OMR94.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_KTT_LISE_OMR95.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_KTT_LISE_OMR99.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_LYS-1_KAGIDI_OMR201.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_LYS-1_KAGIDI_OMR202.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_LYS-1_KAGIDI_OMR203.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_LYS-1_KAGIDI_OMR204.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_LYS-1_KAGIDI_OMR205.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_LYS_OMR84.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_LYS_OMR90.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_SINAV_KAGIDI_OMR_58.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_SINAV_KAGIDI_OMR_59.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_TEOG_OMR55.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_TEOG_OMR56_OTURUMLU.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_TEOG_OMR75.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_TEOG_OMR78_OTURUMLU.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_YAZILI_SINAV_KAGIDI_OMR21A.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_YAZILI_SINAV_KAGIDI_OMR27.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_YAZILI_SINAV_KAGIDI_OMR29.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_YDS_DTS_91.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_YGS_OMR81A.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Fmt/DATASIS_YGS_OMR88A.fmt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Guncelle.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/HtmlAgilityPack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/HtmlAgilityPack.xml
    .xml
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/Interop.Shell32.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/LocalConfig.Ini
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/OMRAPI.dll
    .dll windows:4 windows x86 arch:x86

    e8b87bca55f7e3e3274c55cbd722756a


    Headers

    Imports

    Exports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/PdfSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/SkCommIo.dll
    .dll windows:4 windows x86 arch:x86

    82907a98289a8f4b70662d4986b882c6


    Headers

    Imports

    Exports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/SkDvSr3500Img.dll
    .dll windows:4 windows x86 arch:x86

    c947c1290a554a9ea7cca243eebdc079


    Headers

    Imports

    Exports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/SkLibJpeg.dll
    .dll windows:4 windows x86 arch:x86

    b2e902dd98ec2ed3444f26bb5fb35fe5


    Headers

    Imports

    Exports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/VersionHistory.ini
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/comctl32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/css/SinavSistemiRaporlar.css
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/datasis-logo.ico
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/dmimage.txt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/dmimagesp.txt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/images/MEB_logo.png
    .png
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/images/RaporKapakAlt.jpg
    .jpg
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/images/Thumbs.db
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/images/kirmiziok.png
    .png
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/images/yeni_kisilik.png
    .png
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/images/yeni_mesleki.png
    .png
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/images/yesilok.png
    .png
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/ACharts.min.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/Amcharts_yeni/amcharts.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/Amcharts_yeni/pie.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/Amcharts_yeni/serial.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/Dersonet.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/adobe/images/BitString.as
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/adobe/images/JPGEncoder.as
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/adobe/images/PNGEncoder.as
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/adobe/images/vssver2.scc
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/dynamicflash/.DS_Store
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/dynamicflash/util/.DS_Store
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/dynamicflash/util/Base64.as
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/dynamicflash/util/tests/Base64Test.as
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/dynamicflash/util/tests/vssver2.scc
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/dynamicflash/util/vssver2.scc
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/com/dynamicflash/vssver2.scc
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/save_picture.fla
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/WebcamResources/save_picture.swf
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/jquery-1.8.2.min.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/jquery.maskedinput.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/js/jquery.uniform.js
    .js
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/update.txt
  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/wnvhtmltopdf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/DataSiS/DersonetMaxiWA/wnvinternal.dat
    .exe windows:5 windows x86 arch:x86

    7e30279ee25908474b46148e9789db4a


    Headers

    Imports

    Exports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/Kurulum.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Dersonet_Maxi_Aktif_Kurulum/Kurulum.exe.manifest
  • Dersonet_Maxi_Aktif_Kurulum/autorun.inf
  • Dersonet_Maxi_Aktif_Kurulum/datasis.ico