General

  • Target

    d1b6223c9444283f76758dee7bcd907d_JaffaCakes118

  • Size

    756KB

  • MD5

    d1b6223c9444283f76758dee7bcd907d

  • SHA1

    73648b62774211b9c8b0cf66f3919a01df4b5dea

  • SHA256

    e4d95be483d87f25db57da7bf5f280583803140f7419ba6692564e685926d1d3

  • SHA512

    e20e24d272b3bd68a39f8a790fa1f38e417814d651fb35efeeec2c330acaa8877cd94b75b850b6bdc8c1dcda2fe52b8473fb8c16a741685cdeefde31845fdc5a

  • SSDEEP

    12288:WGe6ASVjW+ewWqhIJ0JiUBxq4h6gX4+J68w+j/xucLX9R9otMtrhg3Indzc6Mq:86ASVC+oMIJaDBlh6gIfaDxumtXeeFd7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • d1b6223c9444283f76758dee7bcd907d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    81c812ed76d4690c8678b3a4f0737a5f


    Headers

    Imports

    Sections

  • /tbu05006/MMIP.bmp
  • /tbu05006/autofill.cfg
  • /tbu05006/autofill_plugin.dll
    .dll windows:4 windows x86 arch:x86

    642602997481961ea908e1039fb91234


    Headers

    Imports

    Exports

    Sections

  • /tbu05006/basis.xml
    .xml
  • /tbu05006/custombuttons_additem.html
    .html .js polyglot
  • /tbu05006/custombuttons_imageviewer.html
    .html .js polyglot
  • /tbu05006/custombuttons_list.html
    .html .js polyglot
  • /tbu05006/custombuttons_menulist.html
    .html .js polyglot
  • /tbu05006/descdb.bin
  • /tbu05006/fdb.bin
  • /tbu05006/icons.bmp
  • /tbu05006/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • /tbu05006/msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    799e28bcbf4e94ca50e4b0a2c283ab7d


    Headers

    Imports

    Exports

    Sections

  • /tbu05006/regdb.bin
  • /tbu05006/snipetoolfull.crc
  • /tbu05006/snipetoolfull.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4afbcf8dc8ed1c5cd8ead42f724a0445


    Headers

    Imports

    Exports

    Sections

  • /tbu05006/spyrem.exe
    .exe windows:4 windows x86 arch:x86

    d3a056f563856b2727bf0f245db3db45


    Headers

    Imports

    Sections

  • /tbu05006/tracert.exe
    .exe windows:5 windows x86 arch:x86

    11f8f2e4f2b7266576846afb4092c5ad


    Headers

    Imports

    Sections

  • /tbu05006/tracertsettings.html
    .html .js polyglot
  • /tbu05006/version.txt