General

  • Target

    2d9552dc73ba5d76b872b83eb0e4338c_JaffaCakes118

  • Size

    5.3MB

  • MD5

    2d9552dc73ba5d76b872b83eb0e4338c

  • SHA1

    a00aecd7e388f94af41279637acc3d5a13bf73ec

  • SHA256

    f1c386c9060edc4dd78de85a498405b83a50a2e16dfcde6cf3062e3b054d27d5

  • SHA512

    a56f9f8cf34ad03be27f714c82cb365f8508e40c71a226ccf8a8270954756b18d61ffe83c662905f516101ad655a75ed2a9a5f026a39b43511d5fc6a68ffb42e

  • SSDEEP

    98304:Gdp6SroIDX5Sl9QAL4eObrFb8tJgbrFb8tJcbrFb8+JabrFb8+JTbrFb8mbrFb8F:up6aR96L2rmWrmerLwrL9r9rfIr9cS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d9552dc73ba5d76b872b83eb0e4338c_JaffaCakes118
    .zip
  • IDSMonitor/CH_DLL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • IDSMonitor/English.LNG
  • IDSMonitor/ExcDump.dll
    .dll windows:4 windows x86 arch:x86

    c2d87f5ced2e1201dabf221f1bb418c8


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/HaronDemangle.dll
    .dll windows:4 windows x86 arch:x86

    0bf9a29529417d2063eea104055535b0


    Headers

    Imports

    Sections

  • IDSMonitor/History.txt
  • IDSMonitor/IDSMonitor.exe
    .exe windows:4 windows x86 arch:x86

    c5e5664df681c7de50362fa1b814d422


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/IDSMonitor.exe.manifest
    .xml
  • IDSMonitor/IDSMonitor.ini
  • IDSMonitor/IDSMonitor.txt
  • IDSMonitor/IDSMonitorScript.cmd
  • IDSMonitor/IDSMonitor_VistaPE_Script.cmd
  • IDSMonitor/Plugins/0DACLPlugin.cfg
  • IDSMonitor/Plugins/0DACLPlugin.dll
    .dll windows:4 windows x86 arch:x86

    7f1df92cee03b17eea964e0560ea2cc6


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/Plugins/0DACLPlugin.ico
  • IDSMonitor/Plugins/0DACLPlugin.ini
  • IDSMonitor/Plugins/0DACLPlugin.txt
  • IDSMonitor/Plugins/0DACLPlugin_ENG.lng
  • IDSMonitor/Plugins/0DACLPlugin_FirstNode.bmp
  • IDSMonitor/Plugins/0DACLPlugin_LastNode.bmp
  • IDSMonitor/Plugins/0DACLPlugin_RUS.lng
  • IDSMonitor/Plugins/0DACLPlugin_RootNode.bmp
  • IDSMonitor/Plugins/1DACLPlugin.cfg
  • IDSMonitor/Plugins/1DACLPlugin.dll
    .dll windows:4 windows x86 arch:x86

    7f1df92cee03b17eea964e0560ea2cc6


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/Plugins/1DACLPlugin.ico
  • IDSMonitor/Plugins/1DACLPlugin.ini
  • IDSMonitor/Plugins/1DACLPlugin.txt
  • IDSMonitor/Plugins/1DACLPlugin_ENG.lng
  • IDSMonitor/Plugins/1DACLPlugin_FirstNode.bmp
  • IDSMonitor/Plugins/1DACLPlugin_LastNode.bmp
  • IDSMonitor/Plugins/1DACLPlugin_RUS.lng
  • IDSMonitor/Plugins/1DACLPlugin_RootNode.bmp
  • IDSMonitor/Plugins/2DACLPlugin.cfg
  • IDSMonitor/Plugins/2DACLPlugin.dll
    .dll windows:4 windows x86 arch:x86

    7f1df92cee03b17eea964e0560ea2cc6


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/Plugins/2DACLPlugin.ico
  • IDSMonitor/Plugins/2DACLPlugin.ini
  • IDSMonitor/Plugins/2DACLPlugin.txt
  • IDSMonitor/Plugins/2DACLPlugin_ENG.lng
  • IDSMonitor/Plugins/2DACLPlugin_FirstNode.bmp
  • IDSMonitor/Plugins/2DACLPlugin_LastNode.bmp
  • IDSMonitor/Plugins/2DACLPlugin_RUS.lng
  • IDSMonitor/Plugins/2DACLPlugin_RootNode.bmp
  • IDSMonitor/Plugins/3DACLPlugin.cfg
  • IDSMonitor/Plugins/3DACLPlugin.dll
    .dll windows:4 windows x86 arch:x86

    7f1df92cee03b17eea964e0560ea2cc6


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/Plugins/3DACLPlugin.ico
  • IDSMonitor/Plugins/3DACLPlugin.ini
  • IDSMonitor/Plugins/3DACLPlugin.txt
  • IDSMonitor/Plugins/3DACLPlugin_ENG.lng
  • IDSMonitor/Plugins/3DACLPlugin_FirstNode.bmp
  • IDSMonitor/Plugins/3DACLPlugin_LastNode.bmp
  • IDSMonitor/Plugins/3DACLPlugin_RUS.lng
  • IDSMonitor/Plugins/3DACLPlugin_RootNode.bmp
  • IDSMonitor/Plugins/4DACLPlugin.cfg
  • IDSMonitor/Plugins/4DACLPlugin.dll
    .dll windows:4 windows x86 arch:x86

    7f1df92cee03b17eea964e0560ea2cc6


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/Plugins/4DACLPlugin.ico
  • IDSMonitor/Plugins/4DACLPlugin.ini
  • IDSMonitor/Plugins/4DACLPlugin.txt
  • IDSMonitor/Plugins/4DACLPlugin_ENG.lng
  • IDSMonitor/Plugins/4DACLPlugin_FirstNode.bmp
  • IDSMonitor/Plugins/4DACLPlugin_LastNode.bmp
  • IDSMonitor/Plugins/4DACLPlugin_RUS.lng
  • IDSMonitor/Plugins/4DACLPlugin_RootNode.bmp
  • IDSMonitor/Plugins/5DACLPlugin.cfg
  • IDSMonitor/Plugins/5DACLPlugin.dll
    .dll windows:4 windows x86 arch:x86

    7f1df92cee03b17eea964e0560ea2cc6


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/Plugins/5DACLPlugin.ico
  • IDSMonitor/Plugins/5DACLPlugin.ini
  • IDSMonitor/Plugins/5DACLPlugin.txt
  • IDSMonitor/Plugins/5DACLPlugin_ENG.lng
  • IDSMonitor/Plugins/5DACLPlugin_FirstNode.bmp
  • IDSMonitor/Plugins/5DACLPlugin_LastNode.bmp
  • IDSMonitor/Plugins/5DACLPlugin_RUS.lng
  • IDSMonitor/Plugins/5DACLPlugin_RootNode.bmp
  • IDSMonitor/Plugins/6DACLPlugin.cfg
  • IDSMonitor/Plugins/6DACLPlugin.dll
    .dll windows:4 windows x86 arch:x86

    7f1df92cee03b17eea964e0560ea2cc6


    Headers

    Imports

    Exports

    Sections

  • IDSMonitor/Plugins/6DACLPlugin.ico
  • IDSMonitor/Plugins/6DACLPlugin.ini
  • IDSMonitor/Plugins/6DACLPlugin.txt
  • IDSMonitor/Plugins/6DACLPlugin_ENG.lng
  • IDSMonitor/Plugins/6DACLPlugin_FirstNode.bmp
  • IDSMonitor/Plugins/6DACLPlugin_LastNode.bmp
  • IDSMonitor/Plugins/6DACLPlugin_RUS.lng
  • IDSMonitor/Plugins/6DACLPlugin_RootNode.bmp
  • IDSMonitor/QuestionBox.vbs
    .vbs
  • IDSMonitor/Readme.txt
  • IDSMonitor/Regular Expressions Syntax.doc
    .doc windows office2003
  • IDSMonitor/Russian.LNG
  • IDSMonitor/ShedulerTask.cmd
  • IDSMonitor/Tools/regjump.exe
    .exe windows:4 windows x86 arch:x86

    2d50cddb751176a0626607a64334a6c0


    Code Sign

    Headers

    Imports

    Sections

  • IDSMonitor/WaitingProcess.vbs
    .vbs