General

  • Target

    10825fcd792697840727506fe16d4d9e_JaffaCakes118

  • Size

    637KB

  • MD5

    10825fcd792697840727506fe16d4d9e

  • SHA1

    d2c977e0d0def0e4a581457f983f5a3f5ac609ff

  • SHA256

    2044718b6406551896ccb4807a4f17e955755a43f49afa82a93df5b8cf71a88b

  • SHA512

    3663c271db12095d32a7bac607a1a4513ca06f860647db607f8e780ef8097aeeacba3d98a12686a8422318252d9334362d366c8d064118e745ee0b30e6b1ef28

  • SSDEEP

    12288:hojYS8K/8hIeI8Pzqn8/9dYd2svmt1FknuFiQOFYLcc6UplYfc8vy4hSy:hojL808+AG6t1F2HYLzd867y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 10825fcd792697840727506fe16d4d9e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dfstmip.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgbfbheb.behbfbg