General

  • Target

    37301e42f28736cb67566e30695a3708_JaffaCakes118

  • Size

    2.9MB

  • MD5

    37301e42f28736cb67566e30695a3708

  • SHA1

    1b8fd4de4b2a14357ddb545d0224b02de98e9428

  • SHA256

    a7247cf96a24ddb366956b5847f31e3c1081461eb635d40e265130ad3de4a39f

  • SHA512

    c3a03a4ac91df56194935afb99f0247b1abdb69e47173c69c335a6978040ffdeccf05ae11ee18ee3a81d9d7202ff6a56134b1c4c0b86fc866f8ac8eecb1b89bd

  • SSDEEP

    49152:mTBF3uuqVX5WY48bNy5aFJYWUI5bqo9Lb//MRwKaTrdY4RX3arKNOxKph6smrD1B:mdNuf5b458iWUI5r9/kKjaaIOOUhqqb6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 37301e42f28736cb67566e30695a3708_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PublisherLogoDefault.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/alerts_icon.bmp
  • $PLUGINSDIR/home_icon.bmp
  • $PLUGINSDIR/license.txt
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON_2_0_1_1.dll
    .dll windows:5 windows x86 arch:x86

    6a53511d70a353598fbaca220bfb6a3b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsUtils_2_1_7_0.dll
    .dll windows:5 windows x86 arch:x86

    b0be97a176bfaf8a03fd58a002a84f83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/revert_icon.bmp
  • $PLUGINSDIR/search_icon.bmp
  • $PLUGINSDIR/setup_top.bmp
  • $PLUGINSDIR/truste_setup.bmp
  • $TEMP/SPStub.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/toolbar.cfg
  • $_114_/Conduit/$_108_/$_14_/SetupIcon.ico
  • $_114_/Conduit/$_108_/$_14_/UninstallerUI.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/0/version.txt
  • .rsrc/1033/DIALOG/105
  • .rsrc/1033/DIALOG/106
  • .rsrc/1033/DIALOG/111
  • .rsrc/1033/GROUP_ICON/103
  • .rsrc/1033/ICON/1.ico
  • .rsrc/1033/MANIFEST/1
  • .rsrc_1
  • .text
  • CERTIFICATE
  • [0]
  • $_229_/$_229_/$_234_
    .dll regsvr32 windows:5 windows x86 arch:x86

    90e03e8777b94714012c80a85d64013c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_48_
    .dll regsvr32 windows:5 windows x86 arch:x86

    adf51bc578e97af1812ba7d695cc884f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_
    .dll regsvr32 windows:5 windows x86 arch:x86

    3b7e0ae15cd17642ff23b725f3a609a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_69_
    .exe windows:5 windows x86 arch:x86

    7b25d62fac6a93a74552bdc3dd699b98


    Code Sign

    Headers

    Imports

    Sections

  • $_73_
    .dll windows:5 windows x86 arch:x86

    7ed7345bb85e82457a9227d9d07acce0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_74_
    .dll windows:5 windows x86 arch:x86

    14bb6b8303c09c5f300e683670ab810f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_75_
    .dll windows:5 windows x64 arch:x64

    75c49f71a7c41606d0404e1fd0712e81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_88_
    .dll regsvr32 windows:5 windows x86 arch:x86

    adf51bc578e97af1812ba7d695cc884f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_89_
    .exe windows:5 windows x86 arch:x86

    7b25d62fac6a93a74552bdc3dd699b98


    Code Sign

    Headers

    Imports

    Sections

  • GottenAppsContextMenu.xml
  • OtherAppsContextMenu.xml
  • SharedAppsContextMenu.xml
  • ToolbarContextMenu.xml
  • toolbar.cfg