General

  • Target

    a71c301f4f5faf1fb2dd44a7c38dcf7b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a71c301f4f5faf1fb2dd44a7c38dcf7b

  • SHA1

    3fcbee9772ca415dcee61395c92fec7eab962480

  • SHA256

    3850a3586deb09cfba2a7a7837c4d9d1af712cc3bf5fd78dfdc411fb788a86eb

  • SHA512

    d54b1793e8620cae7c75b930848e2dbe441ef8a0410612387beb4f56dcf757900b6a995cf003172ab2e4d43d0003e1920358ab4911b5125b5ac6e530e1927bac

  • SSDEEP

    24576:VVYbWzOnA80yE23Z5EU2elH1QnxBuabsM8KGH7Co0OLeGrIocE5lArjPPz:EWzOkyrZOU2elcu08KGbNLeGMb4unz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • a71c301f4f5faf1fb2dd44a7c38dcf7b_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    6013d0b9fb6901d1d5e58a9ae7072103


    Headers

    Imports

    Sections

  • ADVPACK.DLL
    .dll windows:5 windows x86 arch:x86

    c654a5cf569ffb2b7d4ea4076125d5c7


    Headers

    Imports

    Exports

    Sections

  • PI.txt
  • W95INF16.DLL
  • W95INF32.DLL
    .dll windows:4 windows x86 arch:x86

    5f75d18fe563266a560ac1f72bd4cae2


    Headers

    Imports

    Exports

    Sections

  • active~1.htm
    .html .js polyglot
  • config.xml
  • data.xml
    .xml
  • fngrprnt.dll
    .dll windows:5 windows x86 arch:x86

    95d5d555032868a55dfb71899f3429a4


    Headers

    Imports

    Exports

    Sections

  • mega.gif
    .gif
  • messen~1.xml
    .xml
  • msnphoto.scr
    .exe windows:5 windows x86 arch:x86

    27c0cb43ce1328947820bbb6d57a276f


    Headers

    Imports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pi.inf
  • pibase.dll
    .dll windows:5 windows x86 arch:x86

    43d41b64a35570823063ac5e40244bd9


    Headers

    Imports

    Exports

    Sections

  • pidav.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    847b4c077fe610bfa5e095226c5e934a


    Headers

    Imports

    Exports

    Sections

  • piorg.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    594b2ae8719a9f9a1dda6ab409827501


    Headers

    Imports

    Exports

    Sections

  • piorgres.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pisync.dll
    .dll windows:5 windows x86 arch:x86

    9575b7b13a57bcca6b2f2aadb75d273b


    Headers

    Imports

    Exports

    Sections

  • pisynctw.exe
    .exe windows:5 windows x86 arch:x86

    c7dd1a2ec7eaf06dd125cf1aa1fceed0


    Headers

    Imports

    Sections

  • piview.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    9c319a3ef57a2d25ef6cd2046a069440


    Headers

    Imports

    Exports

    Sections

  • prgemp.gif
    .gif
  • prggrn.gif
    .gif
  • slides~1.js
    .js
  • slides~1.xml
  • splash.gif
    .gif
  • startup.js
    .js
  • unicows.dll
    .dll windows:6 windows x86 arch:x86

    785d5607ed2f18f4ea0be5809350b169


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • viewer.htm
    .html .vbs polyglot