General

  • Target

    0d08face1aef96ca38dcf0c4a81ca7d4_JaffaCakes118

  • Size

    12.0MB

  • MD5

    0d08face1aef96ca38dcf0c4a81ca7d4

  • SHA1

    f4365da1b09a051f12e5a46dd5a15ab2f51db104

  • SHA256

    9004d042159a018b64787bcf74075097388e1d503aa8acf901bce28dc8b76cf6

  • SHA512

    abdd16d6da036a99bf93c699d3c41bc4e896cf00425c53148e1144eab17763232a54922efd81c8a25cb95f8105832e0be6c8c59ca71619d9cc4c50643a30ba5e

  • SSDEEP

    393216:77ZiRDTX8zl3uHrArEMe02Vk/KUb6Bv4x:77ZiRDb8zg0rEfKjeBgx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d08face1aef96ca38dcf0c4a81ca7d4_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    d3b0357e5a9df93304cb6f852ecac3b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsSessionSIDW.dll
    .dll windows:5 windows x86 arch:x86

    b3031de3a4e382143eb2236474719dea


    Headers

    Imports

    Exports

    Sections

  • binary_archive_converter.exe
    .exe windows:5 windows x64 arch:x64

    e6d6017ae786dd20e7c1e75920d499e8


    Code Sign

    Headers

    Imports

    Exports

    Sections