General

  • Target

    e740f573956bf0389036c37fc2dcb20b_JaffaCakes118

  • Size

    1.7MB

  • MD5

    e740f573956bf0389036c37fc2dcb20b

  • SHA1

    bf5aa8d8413a6b804170752d29d246f14a6c22c9

  • SHA256

    fc536978e7f67935e9e99b1d7c324f5d08e342c786284622a91855569d1d3cc3

  • SHA512

    b47a734976762a1c25a046357d19dee888f2f236b515537a521a38327e024cce4d6cb40ff576f4db6f9315e8672fee01caa583036d8619257e196aef8cd8c720

  • SSDEEP

    49152:dsTLUJ3erylFBUpBGv9Gzc8UdZimhAAPx3eT:q30erUFuw9GzOZiNKeT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e740f573956bf0389036c37fc2dcb20b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    db6e66bff3da6830d0cb7b1044febeeb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • TCLSCOPY/mmog_data.xml
    .xml
  • TCLSCOPY/plugins/TPDownLoad.dll
    .dll windows:5 windows x86 arch:x86

    53e07e49087094359cc385aa787afa7c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCLSCOPY/version.ini
  • Խж.exe.nsis