General

  • Target

    0a7416e5c1fc2e0b72c6ddeecb292c33_JaffaCakes118

  • Size

    10.8MB

  • MD5

    0a7416e5c1fc2e0b72c6ddeecb292c33

  • SHA1

    9fabd67eb2a7734f2207c77ab42a04fb00daea44

  • SHA256

    cc6e3957d4f4b5a2dad347a357d654b4a4b60af21889ba21feb0aa24d7fc72fb

  • SHA512

    4b9ef0c788c96943c811dfd0b211b3a20a5b7177187ec3fdeffe9adb2bf9b507976e6724e84ce9208649848b53326d8bd22651ac80711874f8a27299790110ca

  • SSDEEP

    196608:h7wq1W6HqULS8djZDTaNNeCKVP5ORsgQfp2d5H/Irk69mFZMCNmfr8qVYuhsLoCC:h8qU6GOjQoxasPIMgPHMCNmjXdCC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 0a7416e5c1fc2e0b72c6ddeecb292c33_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    ed83f419402bc3b83a08e3aaf8b5b5b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • FreeImage.dll
    .dll windows:4 windows x86 arch:x86

    f5ebbf8ee54ae08dd14cf4ce5ef8d446


    Headers

    Imports

    Exports

    Sections

  • IDRMyImage.exe
    .exe windows:5 windows x86 arch:x86

    c670d02a9d27285fc2daa0854b657932


    Headers

    Imports

    Sections

  • IDRMyImage_loc.ini
  • ippcore-7.0.dll
    .dll windows:4 windows x86 arch:x86

    529e91d6559438871439ea8c06f5581b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ippcv-7.0.dll
    .dll windows:4 windows x86 arch:x86

    5687c68457cbe9f410c00c983897360a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ippcvg9-7.0.dll
    .dll windows:4 windows x86 arch:x86

    c016723a569de18c062c2dc5c2ba5f32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ippcvp8-7.0.dll
    .dll windows:4 windows x86 arch:x86

    603101cbe749343998ffa439ce158d35


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ippcvs8-7.0.dll
    .dll windows:4 windows x86 arch:x86

    2e6533642d369a5798289a0095f7963e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ippcvv8-7.0.dll
    .dll windows:4 windows x86 arch:x86

    2e6533642d369a5798289a0095f7963e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ippcvw7-7.0.dll
    .dll windows:4 windows x86 arch:x86

    2e6533642d369a5798289a0095f7963e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libiomp5md.dll
    .dll windows:4 windows x86 arch:x86

    adc15e88286b305c896f26625864f716


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • picture_API.dll
    .dll windows:5 windows x86 arch:x86

    3002a6cb486be5c50681853dfaf35d03


    Headers

    Imports

    Exports

    Sections

  • tbb.dll
    .dll windows:4 windows x86 arch:x86

    1e5146f10a6e871c3d138ef173bf43c7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections