General

  • Target

    2bf745db13c64eb42622db432a6ec81a_JaffaCakes118

  • Size

    1.3MB

  • MD5

    2bf745db13c64eb42622db432a6ec81a

  • SHA1

    35e2e0675f9d1e33e130d254f5a994bea42839c1

  • SHA256

    0f3ce1157baa7e4d4e24ad473e52f58965a837de504b361ab40afe050e2940bc

  • SHA512

    4b990dda76bef276c26f85dc29d4b2bc6c769c87e303f079c2225c45d4fcac26f9a280329e453dbe753ecf736b5a0e716f02aaf47e3e75ebf3dc88ef99bad212

  • SSDEEP

    24576:/c9H2ovMWPFTb2xsC79fvvNeTWuWMk/TS:/GjvtTb2KclMkbS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bf745db13c64eb42622db432a6ec81a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/GoogleFinish_unicode.ini
  • $PLUGINSDIR/GoogleInput_unicode.ini
  • $PLUGINSDIR/GooglePinyinDownloader.exe
    .exe windows:4 windows x86 arch:x86

    9063064264c2770830dd93aad3fff57a


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GoogleToolbar_unicode.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    8fbbf807b5bf33729f0092d4b8c483c4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    bd0c5e2173fde31d22cb05fc3c2a33dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/finish_with_wizzard
  • $PLUGINSDIR/gpyapi.dll
    .dll windows:4 windows x86 arch:x86

    0e847e00fc5cfbcab0596704d0caad9a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ime.bmp
  • $PLUGINSDIR/ime2.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CBDBCoreplus.dll
    .dll windows:4 windows x86 arch:x86

    bfefe484f7d62961f555e4f41feafffd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBGrabConnect_x64.exe
    .exe windows:4 windows x64 arch:x64

    5786b87660442d4e34797574f5482277


    Code Sign

    Headers

    Imports

    Sections

  • CBGrabModule_x64.dll
    .dll windows:4 windows x64 arch:x64

    b95eed2e6e8cab8da16e06e83b2611bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBGrabProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1697e4a580884215b2c394ad01f38180


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBParser.dll
    .dll windows:4 windows x86 arch:x86

    0f570d42b2dd15daa69582e153f8d039


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBSelectText.dll
    .dll windows:4 windows x86 arch:x86

    85732e45b709d74446cee4bcac9843aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBSelectText_x64.dll
    .dll windows:4 windows x64 arch:x64

    06c543f4904391d5d9055484228de311


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBTray.exe
    .exe windows:4 windows x86 arch:x86

    f51def7049472172e811d981f972531e


    Code Sign

    Headers

    Imports

    Sections

  • CBUpdate.exe
    .exe windows:4 windows x86 arch:x86

    e1cc02bd1f495995eb3986753f4adae1


    Code Sign

    Headers

    Imports

    Sections

  • CBUpdateself.exe
    .exe windows:4 windows x86 arch:x86

    df6d7babd7b734d51d8093ed03273e16


    Code Sign

    Headers

    Imports

    Sections

  • CBux.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections