General

  • Target

    6ee693630cc91533c69b9994a9886b8d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    6ee693630cc91533c69b9994a9886b8d

  • SHA1

    abf9746e2e79b3160cd3e442bc52dd7b52c36e7f

  • SHA256

    a6a476967e7e02a0611a06f96f41be34761e69b28fe865bcd96cf5678ebb555a

  • SHA512

    008ea84e6e9dfee64fade8a00c07c0d360f39941cb6fb196f0c6f93a6e0dd9e8590fbfb90d9c20f6bd811ad48792136ae5c84a47674b8e37d0d49ebd28db5a2c

  • SSDEEP

    24576:IVYbWzOLA80yE23Z5EU22lH1QnxBxabsM8KGH7Co0OLeGrIocE5lArjPPA:hWzOIyrZOU22lcx08KGbNLeGMb4unA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ee693630cc91533c69b9994a9886b8d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    6013d0b9fb6901d1d5e58a9ae7072103


    Headers

    Imports

    Sections

  • ADVPACK.DLL
    .dll windows:5 windows x86 arch:x86

    c654a5cf569ffb2b7d4ea4076125d5c7


    Headers

    Imports

    Exports

    Sections

  • PI.txt
  • W95INF16.DLL
  • W95INF32.DLL
    .dll windows:4 windows x86 arch:x86

    5f75d18fe563266a560ac1f72bd4cae2


    Headers

    Imports

    Exports

    Sections

  • active~1.htm
    .html .js polyglot
  • config.xml
  • data.xml
    .xml
  • fngrprnt.dll
    .dll windows:5 windows x86 arch:x86

    95d5d555032868a55dfb71899f3429a4


    Headers

    Imports

    Exports

    Sections

  • mega.gif
    .gif
  • messen~1.xml
    .xml
  • msnphoto.scr
    .exe windows:5 windows x86 arch:x86

    27c0cb43ce1328947820bbb6d57a276f


    Headers

    Imports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pi.inf
  • pibase.dll
    .dll windows:5 windows x86 arch:x86

    43d41b64a35570823063ac5e40244bd9


    Headers

    Imports

    Exports

    Sections

  • pidav.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    847b4c077fe610bfa5e095226c5e934a


    Headers

    Imports

    Exports

    Sections

  • piorg.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    594b2ae8719a9f9a1dda6ab409827501


    Headers

    Imports

    Exports

    Sections

  • piorgres.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pisync.dll
    .dll windows:5 windows x86 arch:x86

    9575b7b13a57bcca6b2f2aadb75d273b


    Headers

    Imports

    Exports

    Sections

  • pisynctw.exe
    .exe windows:5 windows x86 arch:x86

    c7dd1a2ec7eaf06dd125cf1aa1fceed0


    Headers

    Imports

    Sections

  • piview.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    9c319a3ef57a2d25ef6cd2046a069440


    Headers

    Imports

    Exports

    Sections

  • prgemp.gif
    .gif
  • prggrn.gif
    .gif
  • slides~1.js
    .js
  • slides~1.xml
  • splash.gif
    .gif
  • startup.js
    .js
  • unicows.dll
    .dll windows:6 windows x86 arch:x86

    785d5607ed2f18f4ea0be5809350b169


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • viewer.htm
    .html .vbs polyglot