General

  • Target

    0d6180a4eebf9ad921e7850ad5f98617_JaffaCakes118

  • Size

    659KB

  • MD5

    0d6180a4eebf9ad921e7850ad5f98617

  • SHA1

    179db7dc3c65762af9079ec21c3e2be3841ff3d3

  • SHA256

    931ad4def98ae33afa2a8f0bf12e39f96a7c0dfd41b50b91c68a734e93562482

  • SHA512

    316b50db9c6a64e640cf2fa1f89e3a582fb218643e16b0b97c2f0a7cb568837a5bca97d6542721015746a008790a9e4c455cbcc41f97f1085118b8e5a40dba8d

  • SSDEEP

    12288:Ahi5wShpUJl9bfg2SjNpONFPe+vkl9bfg2SjNpONFPe+1:A057pUJnbYxNWecknbYxNWe6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0d6180a4eebf9ad921e7850ad5f98617_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Blade_and_Soulж.exe.nsis
  • TCLS/mmog_data.xml
    .xml