General

  • Target

    3dd806a9b18b0c1c1e416dc2d5c4c25e_JaffaCakes118

  • Size

    1.1MB

  • MD5

    3dd806a9b18b0c1c1e416dc2d5c4c25e

  • SHA1

    ce4904cb0674d6b4135c0d1b5bca2e22c9b780f8

  • SHA256

    e5de2b01f8abf596340ea5807ed76dfae756742982b5eeb2c2eba107603c3d37

  • SHA512

    df3032b64456a1e866f45b2625a5243f88a4125a009ff78942044fc23aa97a54850321c5b9f073e5e9618d53f16d1b0d089da6648a8a2851e11ff6035f577633

  • SSDEEP

    24576:Vch6IGymr4gt5WIUh0BNSMFlLyY9kAXDQ:Vch6IDmUgfNVrXDQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 3dd806a9b18b0c1c1e416dc2d5c4c25e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    a23455b2d570c1e80b11b92360e41c00


    Headers

    Imports

    Sections

  • tbu07781/affid.dat
  • tbu07781/basis.xml
  • tbu07781/bg.jpg
    .jpg
  • tbu07781/icons.bmp
  • tbu07781/icons.bmp_16.bmp
  • tbu07781/icons.bmp_24.bmp
  • tbu07781/icons.bmp_32.bmp
  • tbu07781/info.txt
  • tbu07781/liveinfo_logo.gif
    .gif
  • tbu07781/liveinfo_logo2.gif
    .gif
  • tbu07781/liveinfo_logo3.gif
    .gif
  • tbu07781/liveinfo_logo4.gif
    .gif
  • tbu07781/liveinfo_logo5.gif
    .gif
  • tbu07781/mini_logo.bmp
  • tbu07781/radio2.html
    .html .js polyglot
  • tbu07781/radio3.html
    .html .js polyglot
  • tbu07781/script.html
    .html .js polyglot
  • tbu07781/standart_icons.bmp
  • tbu07781/tbhelper.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4d8dfd5a328a2a4d272d5edf8464fc4c


    Headers

    Imports

    Exports

    Sections

  • tbu07781/tbs_include_script_000666.js
  • tbu07781/tbs_include_script_001203.js
    .js
  • tbu07781/tbs_include_script_001359.js
  • tbu07781/tbs_include_script_007269.js
  • tbu07781/tbs_include_script_013174.js
  • tbu07781/tbs_include_script_015435.js
  • tbu07781/tbs_include_script_016286.js
  • tbu07781/tbs_include_script_021605.js
  • tbu07781/tbs_include_script_023250.js
  • tbu07781/tbs_include_script_026591.js
    .js
  • tbu07781/tbs_include_script_028434.js
    .js
  • tbu07781/tbs_include_script_031265.js
  • tbu07781/toolbar_v0.9.5_w-jsinside-affid-1002.crc
  • tbu07781/toolbar_v0.9.5_w-jsinside-affid-1002.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    35f83c9fed371389f670018f67d64981


    Headers

    Imports

    Exports

    Sections

  • tbu07781/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7008eddda5114e98f3ecd92d21fbec89


    Headers

    Imports

    Sections

  • tbu07781/version.txt
  • tbu07781/your_logo.png
    .png