General

  • Target
    jaffacakes118_489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4.bin
  • Size 838KB
  • Sample261002-ml7fdagd34
  • SHA256 489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • jaffacakes118_489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4.bin
    .exe 838KB
  • $PLUGINSDIR/AdvancedTests.lua
    2KB
  • $PLUGINSDIR/BrowserControl.lua
    3KB
  • $PLUGINSDIR/ButtonEvent.dll
    .dll 4KB
  • $PLUGINSDIR/CustomBrandingURL.dll
    .dll 5KB
  • $PLUGINSDIR/CustomNSISdl.dll
    .dll 40KB
  • $PLUGINSDIR/CustomnsWeb.dll
    .dll 42KB
  • $PLUGINSDIR/Events.lua
    912B
  • $PLUGINSDIR/FloatingProgress.dll
    .dll 4KB
  • $PLUGINSDIR/GuiInit.lua
    .bat 33KB
  • $PLUGINSDIR/IntegratedOffer-Truste.html
    .html .js 9KB
  • $PLUGINSDIR/IntegratedOffer.lua
    9KB
  • $PLUGINSDIR/LuaBridge.dll
    .dll 12KB
  • $PLUGINSDIR/LuaSocket/lua/ltn12.lua
    .js 8KB
  • $PLUGINSDIR/LuaSocket/lua/mime.lua
    .js 2KB
  • $PLUGINSDIR/LuaSocket/lua/socket.lua
    .js 4KB
  • $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
    .js 9KB
  • $PLUGINSDIR/LuaSocket/lua/socket/http.lua
    .js 12KB
  • $PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
    .bat 8KB
  • $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
    .js 3KB
  • $PLUGINSDIR/LuaSocket/lua/socket/url.lua
    .bat 10KB
  • $PLUGINSDIR/LuaSocket/mime/core.dll
    .dll 52KB
  • $PLUGINSDIR/LuaSocket/socket/core.dll
    .dll 80KB
  • $PLUGINSDIR/LuaXml.lua
    .bat 3KB
  • $PLUGINSDIR/LuaXml_lib.dll
    .dll 11KB
  • $PLUGINSDIR/NotifyIcon.dll
    .dll 5KB
  • $PLUGINSDIR/System.dll
    .dll 10KB
  • $PLUGINSDIR/__localxml.xml
    1KB
  • $PLUGINSDIR/custominetc.dll
    .dll 21KB
  • $PLUGINSDIR/definitions.lua
    4KB
  • $PLUGINSDIR/extension.tlb
    1KB
  • $PLUGINSDIR/json.lua
    .bat 18KB
  • $PLUGINSDIR/lua51.dll
    .dll 116KB
  • $PLUGINSDIR/luacom.dll
    .dll 287KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 167KB
  • $PLUGINSDIR/nsisunz.dll
    .dll 40KB
  • $PLUGINSDIR/res/common.css
    1KB
  • $PLUGINSDIR/res/common.js
    .js 14KB
  • $PLUGINSDIR/res/jquery.js
    .js 166KB
  • $PLUGINSDIR/skin/10-28-2010-SKIN.zip
    .zip 23KB
  • accept_button.png
    .png 2KB
  • back_button.png
    .png 2KB
  • cancel_button.png
    .png 2KB
  • decline_button.png
    .png 2KB
  • noimage.png
    .png 1KB
  • vlcmediaplayer-128x128.png
    .png 10KB
  • winclose_button.png
    .png 1KB
  • winmin_button.png
    .png 792B
  • $PLUGINSDIR/skin/DALogo.jpg
    .jpg 5KB
  • $PLUGINSDIR/skin/DALogo2.gif
    .gif 3KB
  • $PLUGINSDIR/skin/DEFAULT_accept_button.png
    .png 2KB
  • $PLUGINSDIR/skin/DEFAULT_back_button.png
    .png 2KB
  • $PLUGINSDIR/skin/DEFAULT_cancel_button.png
    .png 2KB
  • $PLUGINSDIR/skin/DEFAULT_decline_button.png
    .png 2KB
  • $PLUGINSDIR/skin/DEFAULT_winclose_button.png
    .png 1KB
  • $PLUGINSDIR/skin/DEFAULT_winmin_button.png
    .png 792B
  • $PLUGINSDIR/skin/Thumbs.db
    64KB
  • $PLUGINSDIR/skin/accept.gif
    .gif 3KB
  • $PLUGINSDIR/skin/accept_button.png
    .png 2KB
  • $PLUGINSDIR/skin/back.gif
    .gif 3KB
  • $PLUGINSDIR/skin/back_button.png
    .png 2KB
  • $PLUGINSDIR/skin/bg.gif
    .gif 12KB
  • $PLUGINSDIR/skin/cancel.css
    578B
  • $PLUGINSDIR/skin/cancel.gif
    .gif 3KB
  • $PLUGINSDIR/skin/cancel_button.png
    .png 2KB
  • $PLUGINSDIR/skin/close.gif
    .gif 510B
  • $PLUGINSDIR/skin/decline.gif
    .gif 3KB
  • $PLUGINSDIR/skin/decline_button.png
    .png 2KB
  • $PLUGINSDIR/skin/footerBG.gif
    .gif 167B
  • $PLUGINSDIR/skin/headerBG.gif
    .gif 366B
  • $PLUGINSDIR/skin/mod.css
    3KB
  • $PLUGINSDIR/skin/noimage.png
    .png 1KB
  • $PLUGINSDIR/skin/offers.css
    2KB
  • $PLUGINSDIR/skin/progress.css
    2KB
  • $PLUGINSDIR/skin/truste.gif
    .gif 1KB
  • $PLUGINSDIR/skin/vlcmediaplayer-128x128.png
    .png 10KB
  • $PLUGINSDIR/skin/winclose_button.png
    .png 1KB
  • $PLUGINSDIR/skin/winmin_button.png
    .png 792B
  • $PLUGINSDIR/un.package.exe
    .exe 4KB
  • $PLUGINSDIR/utils.lua
    1KB

jaffacakes118_489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4.bin

  • SHA256 489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12863
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths