General

  • Target

    faf699044eac43f8d29acf3a125bd296_JaffaCakes118

  • Size

    649KB

  • MD5

    faf699044eac43f8d29acf3a125bd296

  • SHA1

    6ba32b74c40db738be19813852284dd4d9aec4b5

  • SHA256

    16bc4c3a1ff7518fa4130f71f5ff3d0b833a4f991565e02131b0159315a5c7db

  • SHA512

    99db6dce19e341bc54e652d7b333d1168aaa84df2bc6422d80829ef9844328bbcf55cfbe2624f8d6ee41f78fee00b3671a707de74ac0ed0a26a4f4901ed25aa9

  • SSDEEP

    12288:XQHIEo3lrPlCAR2o0C5+7RRM4s8SwE88TzxGXSirBscfc8vy4hff:XQo71kART0x45P88TNGZ486Gf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • faf699044eac43f8d29acf3a125bd296_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/lylkftg.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedhdhcbeb.bebchdh