General

  • Target

    0c9fc8998ceccea8698f4a1bf5876bfb_JaffaCakes118

  • Size

    648KB

  • MD5

    0c9fc8998ceccea8698f4a1bf5876bfb

  • SHA1

    8012ead29b7e806e992302c1be18715ccf95e050

  • SHA256

    20de7a7c681e1123ca8ce60d868f8c1ac499cdb44656e468d34992f59395a351

  • SHA512

    fecabeff004eaadf498191dbfdb34ffcdfbfe5625c340c9b586e1b1795cbf89d52cbbc170605d7618d78a19bf43323b205184a0626c9e876145fc85d6a75c9c6

  • SSDEEP

    12288:yQNT8Fs2pPcx5AL6AnR9SUCnp4XS3h1GvLzZUBlG7BO0llR:yQNMVPcHq609LqKSR1QZtka

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0c9fc8998ceccea8698f4a1bf5876bfb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/rvmuoqt.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • 1430995618.fhcabfbcaeg