General

  • Target

    44461b7121261330d0ab10a2b1bcda0b_JaffaCakes118

  • Size

    2.4MB

  • MD5

    44461b7121261330d0ab10a2b1bcda0b

  • SHA1

    c4b13c5cedc4457e1129a8639d276bd114244525

  • SHA256

    09c6a579910f9b5417b502c2518013c783edf95642acd6ab6057f571d7fcfc4b

  • SHA512

    f6c01dbf1edbf2cf37175179ac632bd2dd1814fd98540815253aa8930bb0555ee0fa6ffcb8e2084ce77c8ecb77b8e9863a192661721480c01b1824ba6148bb3a

  • SSDEEP

    49152:gBq9WGKeTkiCbRjOViWJXCrYkJnGiJrc7sm1IddbjthtMixnrAptIZf9J3Wl:PEG1w5iVZlC71Fr1maJjthtMEAj09VWl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 44461b7121261330d0ab10a2b1bcda0b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    a3b0ee1fb29253dbfbd34b387e7a55c9


    Headers

    Imports

    Sections

  • $DOCUMENTS/SpyDevastator/SDBHO.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c119708e8e4ae7795d65ffcb9e075f04


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ScriptReader.dll
    .dll windows:4 windows x86 arch:x86

    77166a1544d5b7da07dbf9cedbaf0dd9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/icon.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Lang/English.ini
  • SpyDevastator.exe
    .exe windows:4 windows x86 arch:x86

    c6eb411f28df655f09219f51534351da


    Headers

    Imports

    Sections

  • blacklist.txt
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    a3b0ee1fb29253dbfbd34b387e7a55c9


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    8fc31e88f4e2f35a7d6873d897a2680d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ScriptReader.dll
    .dll windows:4 windows x86 arch:x86

    77166a1544d5b7da07dbf9cedbaf0dd9


    Headers

    Imports

    Exports

    Sections