General

  • Target

    ea3ff83f00d639aae41bb744ac0453dd_JaffaCakes118

  • Size

    677KB

  • MD5

    ea3ff83f00d639aae41bb744ac0453dd

  • SHA1

    cfd8f61e06eca255914030fea53593d3eb10f00f

  • SHA256

    12d754293c31df2f67171e3f5583330996775e73a3dbab9163f4f81b91c72d42

  • SHA512

    8c1039cbfb0ea4a93dd025c4dda4c08e9877fb4ed63de0ac568d952bf54b2ab35e5579922389075ae1e2e794233ac6a96d4016811d988f1851fc02505482c1e7

  • SSDEEP

    12288:PWUrfzVQkQRKI8KnAg3aMcJheKBmZDZIJ0c/zlRrGuOQuNpOGpjeN/9:Pxrf5pE84aMbK30erSyl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ea3ff83f00d639aae41bb744ac0453dd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/rzvqilk.dll
    .dll windows:6 windows x86 arch:x86

    ef0395c3130920c1f8c8dc12ea63a782


    Headers

    Imports

    Exports

    Sections

  • 1431993751.fbjcabfbfbjc