General

  • Target

    f93d491d25a59597e85722478c3bb559_JaffaCakes118

  • Size

    492KB

  • MD5

    f93d491d25a59597e85722478c3bb559

  • SHA1

    f4572469b7c437c22a125c2d255173f54bf6f8a3

  • SHA256

    7e601e75f14c55195e1ee5cd75a8e243812d4a211b45e2fb742bc3faf6edad51

  • SHA512

    72c6739534fe0d9d630ec4fa1ef5aa11280d9898feeaddcbaacf213fc3f439a0dc5cd3f0f134a0977081b50c65ea88df25a1cb7a9ab5bbbe09d1dc94a4652771

  • SSDEEP

    6144:quk4fqjzAQqF6jtY03ZgLpp6TURimpBwXVUTL7E97IkXQxBRUoz0JehYvH7Aw0v9:Q4fwy6peEUBwXVwM9vylzdYvH7AwC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 11 IoCs

Files

  • f93d491d25a59597e85722478c3bb559_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    6c01223cb63ee4264a1cff8d0322dcde


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    06e07a9e2c8ec78ec44f1a538a1bd2a2


    Headers

    Imports

    Exports

    Sections

  • $TEMP/b412d0b0a55de7dd7690da847c45c494/downloaderDDLR.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/b412d0b0a55de7dd7690da847c45c494/downloaderOFFER0.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/b412d0b0a55de7dd7690da847c45c494/downloaderOFFER1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/b412d0b0a55de7dd7690da847c45c494/downloaderOFFER2.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/b412d0b0a55de7dd7690da847c45c494/downloaderSTUB.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/b412d0b0a55de7dd7690da847c45c494/preinstaller.exe
    .exe windows:4 windows x86 arch:x86

    c75aa021b4be3f016821b31d91352687


    Code Sign

    Headers

    Imports

    Sections