General

  • Target

    52247402ea5952b7998b34fba371ae6f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    52247402ea5952b7998b34fba371ae6f

  • SHA1

    69703940852adf7491d849f074e7c875a83ca8e1

  • SHA256

    3615a656e0b63dd5d227e84182aaa0d03e29e2374cf340e2b4ee12af35903441

  • SHA512

    39598eff111c0743ecde06df5aa9aa61e04477f6395ffb5d2e4dac91880492bbeaa7d33c5cd158ec729045e927d3c87588af5decb84c330234d974a1100cd1a5

  • SSDEEP

    49152:UVwrHZXtstAyvi2Sz3nzdQGDFIWn3C4gLpEyEZFUvXd4NzezsC:gkjhSibzmW3JglEyEZivXd4YAC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 52247402ea5952b7998b34fba371ae6f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Core.dll
    .dll windows:5 windows x86 arch:x86

    cf40baa8c45b8804c26253afe1074e57


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC90.CRT.manifest
    .xml
  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UnDiffer.exe
    .exe windows:5 windows x86 arch:x86

    d2dc2c8827bed7ed87ff09fa5015dce1


    Headers

    Imports

    Sections

  • $PLUGINSDIR/VPatch.dll
    .dll windows:4 windows x86 arch:x86

    308dbf2136b37be830bdd627b8ff3095


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tmp0.pat
  • $PLUGINSDIR/tmp1.pat
  • $PLUGINSDIR/tmp2.pat
  • $PLUGINSDIR/tmp3.pat
  • $PLUGINSDIR/tmp4.pat
  • $PLUGINSDIR/tmp5.pat
  • System/protectdrv.dll
    .dll windows:4 windows x86 arch:x86

    d22ce04256d2fe166392bd59d7212d8d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • System/protectdrv.sys
    .sys windows:4 windows x86 arch:x86

    3e57459b90eff89c0596af1dbdbdf1e8


    Code Sign

    Headers

    Imports

    Sections

  • mat_version.dll
    .dll windows:5 windows x86 arch:x86

    2a087726900792b5f959aac494269c46


    Headers

    Imports

    Exports

    Sections

  • unins000.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:4 windows x86 arch:x86

    7b20d7ddf67d32ef46980776247198a1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp