General

  • Target

    1e5572dcda5244cd7451da31e92cdb4d_JaffaCakes118

  • Size

    2.0MB

  • MD5

    1e5572dcda5244cd7451da31e92cdb4d

  • SHA1

    09bbb377f7c9a534b97f64fe1b96fb420e0140db

  • SHA256

    693eb22b127e018b4eadc3246a65063488db8d38a9938eb1951ec3e53cec646b

  • SHA512

    b82af6e4f9de0bfd6403b06951611f4c4ee53d75aaf1e61ded67a9352625ab841791e1e55108a27c792fd4750f6fdf41b646703be4c5ce272271d4ef6e23b85b

  • SSDEEP

    49152:BjHb5BMAYK75/NFg/18K1R2KQHwm3rLOL8ZHb5BMAYK75/N:Z7gclFY8KX2KCwm3ra8Z7gclF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e5572dcda5244cd7451da31e92cdb4d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    113bfc7886d2a6fb29af8c5aceec28e5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    f7f99bdd3b6ce4a87df0ce0eebcde6c0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ImagePacks2/sprite_character_equipmenteffect_epicproduction_90lvstaff.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_gunner_atequipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_gunner_equipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_mage_atequipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_mage_equipment_avatar_coat.NPK.jdiff
  • 地下城与勇士卸载.exe.nsis