General

  • Target

    03314ac4b7f927c8fad971a4306f0249_JaffaCakes118

  • Size

    2.0MB

  • MD5

    03314ac4b7f927c8fad971a4306f0249

  • SHA1

    55933239058e40078d1b90304301ca0a876f2cc7

  • SHA256

    5baa2c9e05879ce583cfb187da50895397fed7166614a8a1d11b56a484da9b6c

  • SHA512

    8a07897ef12f89a4468d7d96f6df415b1f237eca04a67183785efc86e273f1a07eb1be2ccaaa73681fb0996546308f817634bced13027e0b4564dfbbc93ff7ef

  • SSDEEP

    49152:tctaj/+uar1+X0u5Ouy5857n2In/83HTOjCITw+Edz:hj/+KX0k085Kg/ypIiz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 03314ac4b7f927c8fad971a4306f0249_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/VylfygGojlif/$APPDATA/VylfygGojlif/Majut.din
  • $APPDATA/VylfygGojlif/$APPDATA/VylfygGojlif/Yjucqadr.exe
    .exe windows:5 windows x86 arch:x86

    650c3fc59c34f2c912bb3cfd5d7eb981


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    6aa1fb50f909cdf4bea3d3523348e900


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SulroNhp.dll
    .dll windows:5 windows x86 arch:x86

    0c9426194821fd372a632727a590c9f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/MidmeFah.dat
  • $TEMPfolder/TiyfchHadtar/MokfiCofu.exe
    .exe windows:5 windows x86 arch:x86

    96843978956e23fbcd9193647f3da2aa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMPfolder/TiyfchHadtar/freebl3.dll
    .dll windows:5 windows x86 arch:x86

    f873bae979000fa955d161b528461da5


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/libnspr4.dll
    .dll windows:5 windows x86 arch:x86

    c3ea252fa1435d3841a3253d37e94812


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/libplc4.dll
    .dll windows:5 windows x86 arch:x86

    3891d3dc70cf5d7d26826daf36b8c086


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/libplds4.dll
    .dll windows:5 windows x86 arch:x86

    94ac7479544062cc3d4fec633c5ef59a


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/nss3.dll
    .dll windows:5 windows x86 arch:x86

    056c3dc8dc9919b781028066c7f9d51c


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/nssckbi.dll
    .dll windows:5 windows x86 arch:x86

    5e62360c3269a77afaa830fdada7767b


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/nssdbm3.dll
    .dll windows:5 windows x86 arch:x86

    a5e363ad4a9f58bb0976e299ef467471


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/nssutil3.dll
    .dll windows:5 windows x86 arch:x86

    b3ea12d3f9eed13644f0fc4a733cdc54


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/smime3.dll
    .dll windows:5 windows x86 arch:x86

    e9f12bd41b659b69cfb5facb9a09bb01


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/softokn3.dll
    .dll .ps1 windows:5 windows x86 arch:x86 polyglot

    44653ae2122bfb7a591e41b1eccba9c8


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    6f383944ad37c3b1c6ab47bdb43092ea


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/TiyfchHadtar/ssl3.dll
    .dll windows:5 windows x86 arch:x86

    669657e3b303bd7906e02a3d3b84c380


    Headers

    Imports

    Exports

    Sections