General

  • Target

    148c83b56ea384719382a132f3fb8783_JaffaCakes118

  • Size

    581KB

  • MD5

    148c83b56ea384719382a132f3fb8783

  • SHA1

    856a88c6007e5e3662ab7d370deeb0f8c0cd57a8

  • SHA256

    bafe9f16ac8ec312b8a55841e87f42c7be649e33e3ac6f89846e7162327e1b7f

  • SHA512

    8c874bfb558939fb7b79a3f8df6e00aba2334e85e3faec5589c6903730b317d08110428800d0b692552947280a66c81916058620a0d28766c492a2e6728e4a7a

  • SSDEEP

    12288:IODJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+4:IsJbl+36tKPdhJ7z

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 148c83b56ea384719382a132f3fb8783_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbed