General

  • Target

    f789357931b6a490dfa352a3747a4c1d_JaffaCakes118

  • Size

    665KB

  • MD5

    f789357931b6a490dfa352a3747a4c1d

  • SHA1

    e4ebe8b08a03906c38aa093869f913ca7c2a3e38

  • SHA256

    10b9879f3c5ff7f70d8fc4249da79de329cc69e0b7ccc0e97c4761e9723d9821

  • SHA512

    f37e60a9bc593d3481ac0a722467fca143977a54dc586f02e177148081dfbedf67100e6b8ac2a0bab7ab0221342ddef366460f09b8cc16f035d4508c3a705747

  • SSDEEP

    12288:4ZVJObUVJfcUnznsGauOyjILjVIEJzvUobm/LBVh5Gfc8vy4hX:4ZVJiKhXQLyjaBIEJzvhmzBjt86c

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f789357931b6a490dfa352a3747a4c1d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ftwjyfv.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedfgaajca.acjaagfd