General

  • Target

    57109b76db0de79b7fa24def00a33db6_JaffaCakes118

  • Size

    736KB

  • MD5

    57109b76db0de79b7fa24def00a33db6

  • SHA1

    c8803436fe4df09547404830cafc4bddd8f654ea

  • SHA256

    e6a03938f63411bf25c9501f901bd7ebb69ac4a947dc14302191856bec309b83

  • SHA512

    48a6d76f31828036f97a9aba2e0e19b730e67659ba54a09d6ac00a841967f9945a48369232a1145bb7cac68d3a3345b219c25b6d2804ff9f6d5b009bf4a09c2f

  • SSDEEP

    12288:I9nEL8vxI8paDGwlmHgxPe8hJjJ3KSdcxl4Q6wDmwK6zp7tGTzeqsWD/:++8vbpYjJJaSSxrJzd7gac

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 57109b76db0de79b7fa24def00a33db6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    fd5ce232e6703cc4ebbce551ac4fd8cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    ba3891ead2b1916a668d1301763262db


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • softnsoft1.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b882c91d71eb40765c3d089bcda6f90c


    Headers

    Imports

    Exports

    Sections

  • softnsoft1.dll.intermediate.manifest
    .xml
  • softnsoft1up.exe
    .exe windows:4 windows x86 arch:x86

    38336969c56afbdfdcfba9ec9fcf8bee


    Headers

    Imports

    Sections

  • softnsoft1up.exe.intermediate.manifest
    .xml
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp