General

  • Target

    3f9f36719034ed090a0f27ad31ed2de1_JaffaCakes118

  • Size

    5.4MB

  • MD5

    3f9f36719034ed090a0f27ad31ed2de1

  • SHA1

    ab8f9d554b2df70ba6176ca7daad4fe17d62a632

  • SHA256

    9bb44be826b04818fb48e2fc722dc0574774e438df5b75cb02f2436a3f88c289

  • SHA512

    a0cf9c3a58ea7c377aa91f3519d16422b33b6846e0add67d46896d173ad4f8ffe9a38ac60c4a8a731dfb958c71bc00af3da4bf62ca10158f1b8c5af7e288e270

  • SSDEEP

    98304:8HblHW2fQoWC11GJxYryi9TwMVhQv19IpfJhZPmGwvqkrRFRfzVyAAxLbhjPVj:8QsQk18kwMVhQv1wPmGPqpklJbRZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3f9f36719034ed090a0f27ad31ed2de1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEFunctions.dll
    .dll windows:4 windows x86 arch:x86

    d3ade25d7710cc7b0801440c6df6098c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    1c345849e4fc53e2f9d9d9b35c7ec0dd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stack.dll
    .dll windows:4 windows x86 arch:x86

    55ae76a2cfe164921f566c03cfbba5ec


    Headers

    Imports

    Exports

    Sections

  • DownLoad.dll
    .dll windows:4 windows x86 arch:x86

    00939cfa7116674e9ec24ad8e674a720


    Headers

    Imports

    Exports

    Sections

  • Inspector.dll
    .dll windows:4 windows x86 arch:x86

    4951881289cece69a184f764ea6a54f3


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • PEngine.dll
    .dll windows:4 windows x86 arch:x86

    38e0cd8188e8a19ce77227cc11e3e3f9


    Headers

    Imports

    Exports

    Sections

  • PMS.ORD
  • PMS.dll
    .dll windows:4 windows x86 arch:x86

    b7e3fd9a260bc13f994956f215191268


    Headers

    Imports

    Exports

    Sections

  • PMS_Driver.dll
    .dll windows:4 windows x86 arch:x86

    dcab23a34e0cf57b36827136ad02f6da


    Headers

    Imports

    Exports

    Sections

  • PatchUpInit.exe
    .exe windows:4 windows x86 arch:x86

    1164a630a48869e73012bf9591d222d5


    Code Sign

    Headers

    Imports

    Sections

  • PatchUpPlus.exe
    .exe windows:4 windows x86 arch:x86

    81339b9ffb50a9abb9497691ebb25e5b


    Code Sign

    Headers

    Imports

    Sections

  • SPP.DAT
    .zip
  • 168115.spp
  • 231450.spp
  • 238096.spp
  • 238453.spp
  • 240308.spp
  • 245729.spp
  • 256015.spp
  • 259728.spp
  • 264684.spp
  • 290700.spp
  • 293818.spp
  • 308567.spp
  • 311889.spp
  • 311967.spp
  • 312895.spp
  • 313829.spp
  • 314147.spp
  • 314862.spp
  • 315000.spp
  • 317277.spp
  • 318138.spp
  • 320206.spp
  • 320920.spp
  • 323172.spp
  • 323255.spp
  • 324096.spp
  • 324380.spp
  • 324720.spp
  • 326489.spp
  • 327194.spp
  • 329048.spp
  • 329115.spp
  • 329170.spp
  • 329390.spp
  • 329414.spp
  • 329441.spp
  • 329834.spp
  • 810565.spp
  • 810577.spp
  • 810833.spp
  • 811114.spp
  • 811630.spp
  • 812709.spp
  • 814033.spp
  • 814078.spp
  • 817787.spp
  • 819696.spp
  • 821557.spp
  • 822343.spp
  • 823182.spp
  • 823353.spp
  • 823559.spp
  • 823718.spp
  • 824105.spp
  • 824141.spp
  • 824151.spp
  • 825119.spp
  • 826232.spp
  • 826939.spp
  • 828026.spp
  • 828035.spp
  • 828741.spp
  • 828749.spp
  • 831167.spp
  • 832483.spp
  • 832894.spp
  • 833987.spp
  • 833989.spp
  • 835409.spp
  • 835732.spp
  • 835935.spp
  • 837001.spp
  • 837009.spp
  • 838344.spp
  • 838345.spp
  • 838905.spp
  • 839643.spp
  • 840315.spp
  • 840374.spp
  • 840987.spp
  • 841356.spp
  • 841373.spp
  • 841533.spp
  • 841872.spp
  • 841873.spp
  • 842526.spp
  • 842773.spp
  • 870763.spp
  • 871250.spp
  • 873333.spp
  • 873339.spp
  • 873376.spp
  • 873378.spp
  • 883935.spp
  • 885250.spp
  • 885492.spp
  • 885828.spp
  • 885834.spp
  • 885835.spp
  • 885836.spp
  • 885881.spp
  • 886185.spp
  • 886677.spp
  • 886903.spp
  • 886906.spp
  • 887472.spp
  • 887742.spp
  • 887979.spp
  • 888113.spp
  • 888302.spp
  • 889101.spp
  • 890046.spp
  • 890047.spp
  • 890175.spp
  • 890830.spp
  • 890859.spp
  • 891711.spp
  • 891781.spp
  • 891861.spp
  • 892843.spp
  • 892944.spp
  • 893066.spp
  • 893086.spp
  • 893756.spp
  • 893803.spp
  • 894320.spp
  • 894391.spp
  • 894542.spp
  • 896358.spp
  • 896422.spp
  • 896423.spp
  • 896424.spp
  • 896426.spp
  • 896428.spp
  • 897663.spp
  • 897715.spp
  • 898458.spp
  • 898461.spp
  • 898715.spp
  • 899587.spp
  • 899589.spp
  • 899591.spp
  • 900485.spp
  • 900725.spp
  • 901017.spp
  • 901190.spp
  • 901214.spp
  • 902400.spp
  • 903235.spp
  • 904706.spp
  • 905414.spp
  • 905495.spp
  • 905749.spp
  • 905756.spp
  • 907417.spp
  • 908519.spp
  • 908523.spp
  • 908531.spp
  • 908981.spp
  • 910437.spp
  • 911280.spp
  • 911562.spp
  • 911564.spp
  • 911565.spp
  • 911567.spp
  • 911897.spp
  • 911927.spp
  • 912440.spp
  • 912919.spp
  • 913446.spp
  • 913580.spp
  • 913807.spp
  • 914388.spp
  • 914389.spp
  • 914455.spp
  • 914798.spp
  • 914961.spp
  • 916281.spp
  • 916518.spp
  • 916595.spp
  • 917008.spp
  • 917151.spp
  • 917159.spp
  • 917283.spp
  • 917334.spp
  • 917344.spp
  • 917422.spp
  • 917537.spp
  • 917734.spp
  • 917736.spp
  • 917953.spp
  • 918118.spp
  • 918419.spp
  • 918425.spp
  • 918439.spp
  • 918547.spp
  • 919007.spp
  • 920213.spp
  • 920214.spp
  • 920670.spp
  • 920683.spp
  • 920685.spp
  • 920872.spp
  • 920958.spp
  • 921398.spp
  • 921503.spp
  • 921566.spp
  • 921585.spp
  • 921598.spp
  • 921883.spp
  • 922582.spp
  • 922616.spp
  • 922770.spp
  • 922819.spp
  • 923088.spp
  • 923091.spp
  • 923094.spp
  • 923191.spp
  • 923272.spp
  • 923275.spp
  • 923276.spp
  • 923414.spp
  • 923561.spp
  • 923689.spp
  • 923694.spp
  • 923723.spp
  • 923810.spp
  • 923980.spp
  • 924085.spp
  • 924191.spp
  • 924270.spp
  • 924496.spp
  • 924667.spp
  • 924883.spp
  • 925257.spp
  • 925398.spp
  • 925454.spp
  • 925486.spp
  • 925525.spp
  • 925672.spp
  • 925673.spp
  • 925674.spp
  • 925902.spp
  • 926121.spp
  • 926122.spp
  • 926247.spp
  • 926255.spp
  • 926436.spp
  • 927779.spp
  • 927802.spp
  • 927891.spp
  • 927977.spp
  • 927978.spp
  • 928255.spp
  • 928365.spp
  • 928366.spp
  • 928367.spp
  • 928843.spp
  • 929057.spp
  • 929064.spp
  • 929729.spp
  • 929916.spp
  • 929969.spp
  • 930178.spp
  • 930916.spp
  • 931213.spp
  • 931261.spp
  • 931281.spp
  • 931768.spp
  • 931784.spp
  • 932168.spp
  • 933493.spp
  • 933566.spp
  • 933666.spp
  • 933669.spp
  • 933688.spp
  • 933729.spp
  • 933854.spp
  • 934041.spp
  • 934173.spp
  • 934180.spp
  • 934181.spp
  • 934391.spp
  • 934393.spp
  • 934395.spp
  • 934445.spp
  • 934670.spp
  • 934736.spp
  • 934737.spp
  • 935448.spp
  • 935807.spp
  • 935839.spp
  • 935840.spp
  • 935966.spp
  • 936181.spp
  • 936507.spp
  • 936508.spp
  • 936509.spp
  • 936514.spp
  • 936646.spp
  • 936782.spp
  • 937143.spp
  • 937158.spp
  • 937160.spp
  • 937894.spp
  • 938127.spp
  • 938371.spp
  • 938464.spp
  • 938827.spp
  • 938828.spp
  • 938829.spp
  • 939159.spp
  • 939373.spp
  • 939653.spp
  • 939683.spp
  • 939778.spp
  • 940601.spp
  • 940602.spp
  • 940604.spp
  • 941202.spp
  • 941568.spp
  • 941569.spp
  • 941644.spp
  • 941672.spp
  • 941693.spp
  • 942615.spp
  • 942624.spp
  • 942830.spp
  • 942831.spp
  • 943055.spp
  • 943078.spp
  • 943460.spp
  • 943485.spp
  • 943889.spp
  • 943983.spp
  • 943985.spp
  • 943992.spp
  • 944275.spp
  • 944338.spp
  • 944533.spp
  • 944653.spp
  • 945432.spp
  • 945553.spp
  • 946026.spp
  • 946254.spp
  • 946456.spp
  • 946648.spp
  • 946974.spp
  • 946983.spp
  • 947318.spp
  • 947319.spp
  • 947355.spp
  • 947590.spp
  • 947650.spp
  • 947801.spp
  • 947864.spp
  • 947944.spp
  • 947945.spp
  • 948590.spp
  • 948745.spp
  • 948881.spp
  • 948988.spp
  • 949014.spp
  • 949041.spp
  • 949269.spp
  • 949939.spp
  • 950113.spp
  • 950114.spp
  • 950130.spp
  • 950213.spp
  • 950241.spp
  • 950582.spp
  • 950625.spp
  • 950749.spp
  • 950759.spp
  • 950760.spp
  • 950762.spp
  • 950974.spp
  • 951066.spp
  • 951071.spp
  • 951338.spp
  • 951376.spp
  • 951535.spp
  • 951546.spp
  • 951548.spp
  • 951550.spp
  • 951589.spp
  • 951698.spp
  • 951746.spp
  • 951748.spp
  • 951808.spp
  • 951944.spp
  • 951978.spp
  • 952004.spp
  • 952069.spp
  • 952142.spp
  • 952287.spp
  • 952709.spp
  • 952954.spp
  • 953155.spp
  • 953404.spp
  • 953432.spp
  • 953733.spp
  • 953838.spp
  • 954154.spp
  • 954155.spp
  • 954156.spp
  • 954211.spp
  • 954326.spp
  • 954430.spp
  • 954459.spp
  • 954464.spp
  • 954478.spp
  • 954600.spp
  • 954723.spp
  • 955069.spp
  • 955439.spp
  • 955466.spp
  • 955468.spp
  • 955470.spp
  • 955655.spp
  • 955936.spp
  • 956357.spp
  • 956358.spp
  • 956366.spp
  • 956390.spp
  • 956572.spp
  • 956802.spp
  • 956803.spp
  • 956828.spp
  • 956841.spp
  • 956844.spp
  • 957095.spp
  • 957097.spp
  • 957280.spp
  • 957388.spp
  • 957784.spp
  • 957789.spp
  • 957831.spp
  • 958215.spp
  • 958434.spp
  • 958436.spp
  • 958437.spp
  • 958439.spp
  • 958442.spp
  • 958623.spp
  • 958624.spp
  • 958644.spp
  • 958687.spp
  • 958690.spp
  • 958869.spp
  • 959426.spp
  • 959993.spp
  • 959995.spp
  • 959997.spp
  • 960003.spp
  • 960225.spp
  • 960714.spp
  • 960803.spp
  • 960859.spp
  • 961063.spp
  • 961064.spp
  • 961260.spp
  • 961371.spp
  • 961373.spp
  • 961501.spp
  • 962870.spp
  • 962871.spp
  • 963093.spp
  • 967723.spp
  • 968537.spp
  • 968816.spp
  • 969059.spp
  • 969559.spp
  • 969603.spp
  • 969604.spp
  • 969613.spp
  • 969614.spp
  • 969615.spp
  • 969679.spp
  • 969681.spp
  • 969682.spp
  • 969685.spp
  • 969686.spp
  • 969693.spp
  • 969897.spp
  • 969898.spp
  • 970011.spp
  • 970012.spp
  • 970059.spp
  • 970238.spp
  • 970710.spp
  • 971468.spp
  • 971486.spp
  • 971557.spp
  • 971633.spp
  • 971931.spp
  • 971933.spp
  • 971961.spp
  • 972260.spp
  • 972270.spp
  • 972363.spp
  • 972580.spp
  • 972581.spp
  • 972591.spp
  • 972592.spp
  • 972593.spp
  • 972594.spp
  • 973346.spp
  • 973354.spp
  • 973507.spp
  • 973525.spp
  • 973540.spp
  • 973705.spp
  • 973815.spp
  • 973869.spp
  • 973904.spp
  • 974112.spp
  • 974145.spp
  • 974318.spp
  • 974392.spp
  • 974455.spp
  • 974571.spp
  • 974771.spp
  • 974783.spp
  • 974810.spp
  • 975025.spp
  • 975467.spp
  • 975517.spp
  • 975542.spp
  • 975560.spp
  • 975713.spp
  • 976325.spp
  • 977165.spp
  • 977914.spp
  • 978037.spp
  • 978251.spp
  • 978262.spp
  • 978706.spp
  • SPL.DAT
  • SPO.DAT
  • Uninstall.exe.nsis
  • Update.ini
  • mfc80.dll
    .dll windows:4 windows x86 arch:x86

    f2142b48ef03b50f50df1e8ae87bc643


    Headers

    Imports

    Sections

  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updatePlus.exe
    .exe windows:4 windows x86 arch:x86

    8c68777541109d1961f62eec1ac8c55e


    Code Sign

    Headers

    Imports

    Sections