General

  • Target

    38cb676501f9e153cae50885e5d0ffc2_JaffaCakes118

  • Size

    1.2MB

  • MD5

    38cb676501f9e153cae50885e5d0ffc2

  • SHA1

    0318d8d93fedb1fb973ab3620f3a944c4adc9be4

  • SHA256

    d9c34995544c545519dc74b191f57d87e3367d82f48a574340536fbe72dccf42

  • SHA512

    8c58dbc0e96537d257c57254ba2fc918fb3e90fd8f7eaf19fd56cc48ef9a714b3400f644742c627c71357a540400ddd04853b90f908cc3e152d5653e48a1efd2

  • SSDEEP

    24576:6Mfj5eLbbJ2YDiYf1fr5GFSlNBCj2rUhObwhS7wfPrTD5NLNUGoaRjhCVu/uC2:XdunJVT1VGFSluj2rYSkfPHDPxUGosFK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 29 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 38cb676501f9e153cae50885e5d0ffc2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/swisher/Microsoft.VC80.CRT.manifest
  • $PROGRAMFILES/swisher/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/swisher/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/swisher/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/swisher/swisher.dll
    .dll windows:4 windows x86 arch:x86

    c60ff47ca9cf20eb4f143f103d40db59


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/swisher/swisher.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/moreinfo.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    fd5ce232e6703cc4ebbce551ac4fd8cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    ba3891ead2b1916a668d1301763262db


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
  • moreinfo.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    738a8dffffc5907563dbe017ca84ae08


    Headers

    Imports

    Exports

    Sections

  • moreinfoup.exe
    .exe windows:4 windows x86 arch:x86

    c2c3ea3a1e00f6d2549659f6b33cc65b


    Headers

    Imports

    Sections

  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp