General

  • Target

    11c0d69ad738509cff0fdb246a39ed34_JaffaCakes118

  • Size

    641KB

  • MD5

    11c0d69ad738509cff0fdb246a39ed34

  • SHA1

    b2ae3e69e3b8a7e5b0044ffb71acf48549d0b7d5

  • SHA256

    d71c4cf97c8ab7bc7224b978c949858e180cb8683d750d9ac212c5957feedeea

  • SHA512

    6e833e48fdb9793fb0a2bf58967700868a92e12f1d42b7ecd725976f01739a51d1500200e96561ab897f3483d3a5da6711a7c80099af006af358e19ca757a76c

  • SSDEEP

    12288:rAvRNj1tU3Gh/RlhHqz0+sGNmQ9BUfPPf//uY4XKw8fTQPT3RZTafc8vy4hj:rA5l3UWh1KA+D8YBUfPHuY4XKw8f8P7C

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 11c0d69ad738509cff0fdb246a39ed34_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/docqoul.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedfhegfah.hafgehfd