General

  • Target

    461dae6e9630da75c254d93e96caeb39_JaffaCakes118

  • Size

    1.3MB

  • MD5

    461dae6e9630da75c254d93e96caeb39

  • SHA1

    0132156d3b2d4965a0c4b7a6dbdcc78ad61ac5f3

  • SHA256

    69e63a950786b5f8550d4636defed0a5cb217afa6c3ce86fe16dfa83a1b7f9be

  • SHA512

    f8f51acd751f1961c88b2ecb346b9c0cef6cc9e849e827d10f33620fcaabe1ed51a4de09c0382e8d50edf41c11892b58648111fe14d0f061f864ee6adcedb946

  • SSDEEP

    24576:/c9H2ovMWPFTb2xsC79fvvNeTWuWMk/Tn:/GjvtTb2KclMkbn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 461dae6e9630da75c254d93e96caeb39_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/GoogleFinish_unicode.ini
  • $PLUGINSDIR/GoogleInput_unicode.ini
  • $PLUGINSDIR/GooglePinyinDownloader.exe
    .exe windows:4 windows x86 arch:x86

    9063064264c2770830dd93aad3fff57a


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GoogleToolbar_unicode.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    8fbbf807b5bf33729f0092d4b8c483c4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    bd0c5e2173fde31d22cb05fc3c2a33dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/finish_with_wizzard
  • $PLUGINSDIR/gpyapi.dll
    .dll windows:4 windows x86 arch:x86

    0e847e00fc5cfbcab0596704d0caad9a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ime.bmp
  • $PLUGINSDIR/ime2.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CBDBCoreplus.dll
    .dll windows:4 windows x86 arch:x86

    bfefe484f7d62961f555e4f41feafffd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBGrabConnect_x64.exe
    .exe windows:4 windows x64 arch:x64

    5786b87660442d4e34797574f5482277


    Code Sign

    Headers

    Imports

    Sections

  • CBGrabModule_x64.dll
    .dll windows:4 windows x64 arch:x64

    b95eed2e6e8cab8da16e06e83b2611bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBGrabProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1697e4a580884215b2c394ad01f38180


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBParser.dll
    .dll windows:4 windows x86 arch:x86

    0f570d42b2dd15daa69582e153f8d039


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBSelectText.dll
    .dll windows:4 windows x86 arch:x86

    85732e45b709d74446cee4bcac9843aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBSelectText_x64.dll
    .dll windows:4 windows x64 arch:x64

    06c543f4904391d5d9055484228de311


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CBTray.exe
    .exe windows:4 windows x86 arch:x86

    f51def7049472172e811d981f972531e


    Code Sign

    Headers

    Imports

    Sections

  • CBUpdate.exe
    .exe windows:4 windows x86 arch:x86

    e1cc02bd1f495995eb3986753f4adae1


    Code Sign

    Headers

    Imports

    Sections

  • CBUpdateself.exe
    .exe windows:4 windows x86 arch:x86

    df6d7babd7b734d51d8093ed03273e16


    Code Sign

    Headers

    Imports

    Sections

  • CBux.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections