General

  • Target

    0bbff9e2b2603a6cfc9fe29f206e3dd7_JaffaCakes118

  • Size

    5.9MB

  • MD5

    0bbff9e2b2603a6cfc9fe29f206e3dd7

  • SHA1

    5f3b723c6a889bbfbedfdb01db36252e9dd5ec29

  • SHA256

    a5e8399e77f82c10a0ef98602be6a715c156234b30ffff21a37952ab577788ec

  • SHA512

    bda6b63684c03820e42f3a77d4a9a73cfa7373203947a19359af57d567521f1332b77e16f8cf374b7ef0f69af168b58c85132fb9f264f91bdf1b1c1e62f1df60

  • SSDEEP

    98304:/2ZxTgxwBU0k9wlBPYNFYA/kfcHjSu/OzFKHDEbbzWjYY5yL066pttEohIhe:/2vTBU03l61kEHjJcFKCbzW5a05tEw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bbff9e2b2603a6cfc9fe29f206e3dd7_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    d9997cc22607493388b309294c30bacc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/AndroidAssistHelper.dll
    .dll windows:5 windows x86 arch:x86

    bda90759ce7103431c618a8c43953c91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/ConnectService.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/PluginInfo.xml
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.dat
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.exe
    .exe windows:4 windows x86 arch:x86

    12780c707a8f77f4a257476d64b64b80


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.rdb