General

  • Target

    4560c6002755463fc3a58a27cbc2ae2f_JaffaCakes118

  • Size

    13.6MB

  • MD5

    4560c6002755463fc3a58a27cbc2ae2f

  • SHA1

    3dbb2691176defad44e04996acd879ffd949c0a4

  • SHA256

    bd232b250f69a2dd997044807ebd8cdb76570fa702cdafc1dc3d09a49919c74f

  • SHA512

    b1e5ad948dd6fa361179d51eae400b53d75fcc007aaf21cc34b06d9dddde1d106ebe13b8e1cc677cb2d13b30aaf21aeb49f4210d2dac1efe146527bef09dc906

  • SSDEEP

    393216:CEyLUgvm8UxpGCvIytR/WP2fXF4n6eaxaQO:HaFmTz5Wef1WHQO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 4560c6002755463fc3a58a27cbc2ae2f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ASL.dll
    .dll windows:4 windows x86 arch:x86

    7e5389a65c048cb948b60da9677ba9b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CFNetwork.dll
    .dll windows:4 windows x86 arch:x86

    1053bf3d8f97bcc942f965a6a228e7bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CoreFoundation.dll
    .dll windows:4 windows x86 arch:x86

    de6828d87d83d26e4deaee4f27168bd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • License.txt
  • Tenorshare iPhone Data Recovery.chm
    .chm
  • dmglib.dll
    .dll windows:5 windows x86 arch:x86

    975180cc0fe975f313970ee7493efd18


    Headers

    Imports

    Exports

    Sections

  • iPhone Data Recovery(check).exe
    .exe windows:5 windows x86 arch:x86

    33f2ed986a2c236dc62648f1ad1606c8


    Headers

    Imports

    Sections

  • iPhone Data Recovery.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • iTunesMobileDevice.dll
    .dll windows:4 windows x86 arch:x86

    79ee2c7ad116269a24d703fc7108eb96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icudt46.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • image/Thumbs.db
  • image/about_backgroud.png
    .png
  • image/backgroud.png
    .png
  • image/bg_help_center.png
    .png
  • image/bg_itunes.png
    .png
  • image/bg_itunes_reslut.png
    .png
  • image/bg_limited.png
    .png
  • image/bg_locked.png
    .png
  • image/bg_popup.png
    .png
  • image/bg_progress.png
    .png
  • image/bg_register.png
    .png
  • image/bg_step_transparent.png
    .png
  • image/bg_transparent.png
    .png
  • image/btn_home.png
    .png
  • image/btn_register.png
    .png
  • image/btn_start.png
    .png
  • image/btn_start_scan.png
    .png
  • image/button_cancel.png
    .png
  • image/button_close.png
    .png
  • image/button_freetrial.png
    .png
  • image/button_go.png
    .png
  • image/button_help.png
    .png
  • image/button_home.png
    .png
  • image/button_key.png
    .png
  • image/button_min.png
    .png
  • image/button_next.png
    .png
  • image/button_ok.png
    .png
  • image/button_pause.png
    .png
  • image/button_popup.png
    .png
  • image/button_previous.png
    .png
  • image/button_recover.png
    .png
  • image/button_recovery_from_ios_device_select.png
    .png
  • image/button_recovery_from_ios_device_unselect.png
    .png
  • image/button_recovery_from_itunes_select.png
    .png
  • image/button_recovery_from_itunes_unselect.png
    .png
  • image/button_resume.png
    .png
  • image/button_start.png
    .png
  • image/button_stop.png
    .png
  • image/buynow.png
    .png
  • image/call.png
    .png
  • image/can_scan_bg.png
    .png
  • image/check_all.png
    .png
  • image/check_none.png
    .png
  • image/check_segment.png
    .png
  • image/detail_calls.png
    .png
  • image/detail_calls1.png
    .png
  • image/detail_camera.png
    .png
  • image/detail_contacts.png
    .png
  • image/detail_data.png
    .png
  • image/detail_message_attachment.png
    .png
  • image/detail_messages.png
    .png
  • image/detail_notes.png
    .png
  • image/detail_photos.png
    .png
  • image/detail_recordings.png
    .png
  • image/detail_reminders.png
    .png
  • image/detail_safari.png
    .png
  • image/details_list.png
    .png
  • image/device_enable.png
    .png
  • image/device_encrypt.png
    .png
  • image/device_video.png
    .png
  • image/find.gif
    .gif
  • image/find_top_bg.png
    .png
  • image/flow/Thumbs.db
  • image/flow/incoming_bottom.png
    .png
  • image/flow/incoming_center.png
    .png
  • image/flow/incoming_top.png
    .png
  • image/flow/outgoing_bottom.png
    .png
  • image/flow/outgoing_center.png
    .png
  • image/flow/outgoing_top.png
    .png
  • image/ico_call.png
    .png
  • image/ico_camera.png
    .png
  • image/ico_contacts.png
    .png
  • image/ico_data.png
    .png
  • image/ico_iphone.png
    .png
  • image/ico_message.png
    .png
  • image/ico_music.png
    .png
  • image/ico_notes.png
    .png
  • image/ico_photo.png
    .png
  • image/ico_recordings.png
    .png
  • image/ico_reminders.png
    .png
  • image/ico_safari.png
    .png
  • image/ico_video.png
    .png
  • image/ios_help_center_bg.png
    .png
  • image/list_hearder.bmp
  • image/list_split.bmp
  • image/main_no_connct.png
    .png
  • image/menu_about.png
    .png
  • image/menu_buy.png
    .png
  • image/menu_help.png
    .png
  • image/menu_register.png
    .png
  • image/number.png
    .png
  • image/number_bg.png
    .png
  • image/preview_recording.png
    .png
  • image/preview_video.png
    .png
  • image/recovery_backgroud.png
    .png
  • image/recovery_ready_backgroud.png
    .png
  • image/search_top_bg.png
    .png
  • image/top_bar_backgroud.png
    .png
  • image/wait.gif
    .gif
  • itunnel_mux.dll
    .dll windows:5 windows x86 arch:x86

    262c098315dd274253cd55c40be5a5c6


    Headers

    Imports

    Exports

    Sections

  • libMobiledevice.dll
    .dll windows:5 windows x86 arch:x86

    4a811cfbfc78d686ae85e4114831c971


    Headers

    Imports

    Exports

    Sections

  • lib_iphone_recovery.dll
    .dll windows:5 windows x86 arch:x86

    02366f8042b7a9311fd9d224dbdea7a7


    Headers

    Imports

    Exports

    Sections

  • libdispatch.dll
    .dll windows:4 windows x86 arch:x86

    a853ffe7505a7301ffccfdd6923ebe96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libexcel.dll
    .dll windows:5 windows x86 arch:x86

    9ab56d47be08171bcc5e652ab403681e


    Headers

    Imports

    Exports

    Sections

  • libgcc_s_dw2-1.dll
    .dll windows:4 windows x86 arch:x86

    3b2b71c471630c957c3f76f03a8679b7


    Headers

    Imports

    Exports

    Sections

  • libicuin.dll
    .dll windows:4 windows x86 arch:x86

    0cab9e85ffa53719330bb89dfdaea429


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libicuuc.dll
    .dll windows:4 windows x86 arch:x86

    3081464d5060455974fb2666f205f421


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • objc.dll
    .dll windows:4 windows x86 arch:x86

    952900e319906cab1975678a33fc087a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pic/Success.png
    .png
  • pic/Thumbs.db
  • pic/button_Restart.png
    .png
  • pic/button_Restart_later.png
    .png
  • pic/button_cancel.png
    .png
  • pic/button_close.png
    .png
  • pic/button_min.png
    .png
  • pic/button_no.png
    .png
  • pic/button_ok.png
    .png
  • pic/button_yes.png
    .png
  • pic/error.png
    .png
  • pic/message_bottom.png
    .png
  • pic/message_line_left.png
    .png
  • pic/message_line_right.png
    .png
  • pic/message_top.png
    .png
  • pic/msg_title_icon.png
    .png
  • pic/warning.png
    .png
  • pthreadVC2.dll
    .dll windows:4 windows x86 arch:x86

    3ce74b106c8385c2b6df0c6e806f3cc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    31552e8967da01fae4dbb6dca841c0cc


    Headers

    Imports

    Exports

    Sections

  • syringe.dll
    .dll windows:5 windows x86 arch:x86

    4d68a0f3f4111a6fab4b1c16c35c5d09


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    16fab46cbb525152d5f8f1b253068269


    Code Sign

    Headers

    Imports

    Exports

    Sections