General

  • Target

    0438c5e0a4e6e2cc0fc70379203b3288_JaffaCakes118

  • Size

    581KB

  • MD5

    0438c5e0a4e6e2cc0fc70379203b3288

  • SHA1

    43e3f8da0ea049277d97139aca6395affed2fc93

  • SHA256

    f4da89789b0717da258b0642039e479c69280a09d639142a9832e2d7d1f9aea4

  • SHA512

    6d03c70d9fb69d33f9e4d91fef42750704cededd30ab61085d02e6e56c118a6c559de0c3fa13ed85759aa835d9e3089c041bc24c19f790b44746e21d1a917c4a

  • SSDEEP

    12288:/+DJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+V:/cJbl+36tKPdhJ7y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0438c5e0a4e6e2cc0fc70379203b3288_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbef