General

  • Target

    30837c9159ab3665513c66176ac21043_JaffaCakes118

  • Size

    3.1MB

  • MD5

    30837c9159ab3665513c66176ac21043

  • SHA1

    0ec104293d6e214202c2adcc6fc8de3cc8b46392

  • SHA256

    fda6c14142d8fb352620eb6ff697cdfc1b38b6c5380648b038047397ed552129

  • SHA512

    1b7645c7f84e4902a8fa29faff1bca7fe6a3c362b5f0b5c037ba6ee71d91c89dd0d03e884df209c0f70208cb2253c1d7bad7ccc61239fa79bfe04398af9927f4

  • SSDEEP

    98304:TAKJDf19J5OIE+nGu/bT90QkoHkVa856o4:UKLJHEKtHI9A

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 30837c9159ab3665513c66176ac21043_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AutoShutdown.exe
    .exe windows:5 windows x86 arch:x86

    8f6ab9ff71d108d0e3816839ecec811b


    Headers

    Imports

    Sections

  • ClonedFileCleaner.exe
    .exe windows:5 windows x86 arch:x86

    68e7fb65f33a2170ff7a847adb260cef


    Headers

    Imports

    Sections

  • FilePulverizer.exe
    .exe windows:5 windows x86 arch:x86

    534a01922bcaf1cfc0ccede17be13f25


    Headers

    Imports

    Sections

  • GenuineRegistryDoctor.exe
    .exe windows:5 windows x86 arch:x86

    4d3e6dc8104daa9dcdba98c9782a5279


    Code Sign

    Headers

    Imports

    Sections

  • StartupManager.exe
    .exe windows:5 windows x86 arch:x86

    43571c92784d74a1beab6ff2eeb57dbc


    Headers

    Imports

    Sections

  • SweepHelper.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SystemInformation.exe
    .exe windows:5 windows x86 arch:x86

    3e1894e298aa282e9eb9e8668bc36691


    Headers

    Imports

    Sections

  • const.dat
  • data/topic.db
  • data/utilities.db
  • lang/English.lan
  • res/16.png
    .png
  • res/32.png
    .png
  • res/btnpanel.dat
  • res/icon.ico
  • res/images/about.png
    .png
  • res/images/background.png
    .png
  • res/info.html
    .html
  • res/trialnotify.mht
    .eml
  • attachment-2
    .gif
  • email-html-1.txt