General

  • Target

    ecf6de5479dcb32908c61f9ade971e84_JaffaCakes118

  • Size

    685KB

  • MD5

    ecf6de5479dcb32908c61f9ade971e84

  • SHA1

    b29eeaba73de2b51c4710b1c8567e4651f1a8aa9

  • SHA256

    132471dad4f3683ecdc87adb6d27aa694686ee1f4c9ec885990c2acd8a9a8de0

  • SHA512

    3f7dbc0d52685b190962fbac7331fa929001e186345a7e6279ec8b2b8c540678fb2c5dcda6a73122dd769253929093355f4cb2ad793a28b74564a005f6ebc38b

  • SSDEEP

    12288:xTQSIoCTiGICcXtiv2sLN0GNM1/z6mURdQidJbKXJcV+IeMH857MARrHfc8vy4h9:xTQNoNpNtNsnNAz/wxPbKXGgdsw77C8l

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ecf6de5479dcb32908c61f9ade971e84_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nrfqphl.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgagfdeb.bedf