General

  • Target

    0eee5d587793fdd36334ae5743c0fa97_JaffaCakes118

  • Size

    558KB

  • MD5

    0eee5d587793fdd36334ae5743c0fa97

  • SHA1

    eeb48c2d29b62705f669e7fb896c9c7d648a21dd

  • SHA256

    163a104dba6f0d26900d3847a9dd97ec8f7fd4a20bd8085d0c26a9ae8d5afb01

  • SHA512

    cee50b4f57644b9b05eb390c31dbfea727ff16bbeed478efadaf26df17296ac139a9658a1cba2f6840d55317db7c96e1492d71aa1c3b51af66d5eaa203dbaf77

  • SSDEEP

    12288:YWwsVWHlxcUTa5vvLKoXYp+iVLOVJ5R49wWdIWQmqdJcKs:YWwmAcSFtOVHR49KB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0eee5d587793fdd36334ae5743c0fa97_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xzjso.dll
    .dll windows:5 windows x86 arch:x86

    fc7a1df3c59011588ea8521a464c1959


    Headers

    Imports

    Exports

    Sections

  • 1427900286.ebcabfbdhbig