General

  • Target

    11c3df997c39c380b5c391c426966de9_JaffaCakes118

  • Size

    581KB

  • MD5

    11c3df997c39c380b5c391c426966de9

  • SHA1

    ca72bae1dc6ee53efeab4bb0bf3b53381fa3fc35

  • SHA256

    bc61405f663a625612c1b7419c4b124d7332aff2d6035e78208550953b5f5d79

  • SHA512

    3c07dd2411126b07698f1c3c28615fc98e965fb9c6203e57c1f0419635f4411451b7e06cfb3c7ad41a1a1f16587b5ee316fdc079076b0064bd891320724584a3

  • SSDEEP

    12288:gfDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+W:gLJbl+36tKPdhJ7h

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 11c3df997c39c380b5c391c426966de9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbef