General

  • Target

    123bb10f1b9392e5d0c1816dbe29c8f0_JaffaCakes118

  • Size

    989KB

  • MD5

    123bb10f1b9392e5d0c1816dbe29c8f0

  • SHA1

    fc5c5e1ebf302dec2c9337b550e884cca479a1d3

  • SHA256

    255ba55168751d2b17f2bfa7a8b27ef0f43d3018fbc1fb207b7a5ff4c3825daf

  • SHA512

    eeb2560d92ebceb94a6921edacd482b4ab33d52dede2e3ca323ed5db90a00b1a5566ef38479acf62fdfc8f8669067d9d84d815a663abe3fbf6bfd93c2eebdd81

  • SSDEEP

    24576:99f9D/PUbP3smQDKX4Akvy/KqlfAeg+caRZgqw:zfh/rTDKX4tyyqWeDcaRZe

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 123bb10f1b9392e5d0c1816dbe29c8f0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • DataBase/info.dbx
  • DocDrag.chm
    .chm
  • HTMLParse.dll
    .dll windows:4 windows x86 arch:x86

    a2497f92655d680cfc48e86ba47e1926


    Headers

    Imports

    Exports

    Sections

  • RecoverSetup.exe
    .exe windows:4 windows x86 arch:x86

    d67f6abfdce868896079f661d1c8182d


    Headers

    Imports

    Sections

  • SCommCtl.dll
    .dll windows:4 windows x86 arch:x86

    b004dcce3a63aaf7a24a68f66d8e1710


    Headers

    Imports

    Exports

    Sections

  • SDbAPI.dll
    .dll windows:4 windows x86 arch:x86

    bcf1ab8257b6a823676bd248bbb5c667


    Headers

    Imports

    Exports

    Sections

  • SDocCatch.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8bba66a7e9c6cd14a52ea5a33bf22e47


    Headers

    Imports

    Exports

    Sections

  • SDocDB.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cee982f3685c25732e53454d4439bef2


    Headers

    Imports

    Exports

    Sections

  • SDocDrag.exe
    .exe windows:4 windows x86 arch:x86

    6c28cf5759e8f24caa6a57fe9a1231f5


    Headers

    Imports

    Sections

  • TranDoc.htm
    .html .vbs polyglot
  • TranFlash.htm
    .html .vbs polyglot
  • TranImage.htm
    .html .vbs polyglot
  • TranMedia.htm
    .html .vbs polyglot
  • TranSelect.htm
    .html .vbs polyglot
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • hha.dll
    .dll windows:4 windows x86 arch:x86

    969d3807d966bc686a2e4719c377ca96


    Headers

    Imports

    Exports

    Sections

  • hhc.exe
    .exe windows:4 windows x86 arch:x86

    923cb3b7dca4da6b58b66663d91cb878


    Headers

    Imports

    Sections

  • info.dbx
  • license.txt
  • readme.txt
  • seesi.url
  • setup.nsi
  • tips.txt