General

  • Target

    fa764b35d0ceb85c6abb7fd0506bacab_JaffaCakes118

  • Size

    8.3MB

  • MD5

    fa764b35d0ceb85c6abb7fd0506bacab

  • SHA1

    f5f19a7503c3382407a8b9d7d249cd32c29c99f1

  • SHA256

    3b4524482985a2cede11293fcbf3e319e643756f4c7ac2c8ea72e10e0608e936

  • SHA512

    f27a4fe50ab4711f0ac88a8932874012f47d8b7226f6da7082d2a7646237555313cd96d54540af90a7fa4267527f336a33bb8cda33a45cb5b3637bdef5a2a70a

  • SSDEEP

    196608:vEQsPidJioAxLR4fxlHvatc9CqpFDqRgM9+buuqzrBu0m2tl:vH80Oxt4fxlHvec99pFWRg/buuqzwx2z

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa764b35d0ceb85c6abb7fd0506bacab_JaffaCakes118
    .zip
  • Avira.Acp.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Avira.Acp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Avira.OE.Communicator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Avira.OE.NativeCore.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Avira.OE.WinCore.Interface.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Avira.ServiceHost.exe.config
    .xml
  • Avira.Systray.exe.config
    .xml
  • BundledProducts.xml
  • Interop.SHDocVw.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Mshtml.interop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NLog.config
  • OESettings.backup
  • OESettings.config
  • _-Name
    .exe windows:5 windows x86 arch:x86

    862309d32335ceb447d020d5568bd8ba


    Code Sign

    Headers

    Imports

    Sections

  • launcher.cache.config.json
  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections