General

  • Target

    13fd7a3bde68cf7de21528e301c20e40_JaffaCakes118

  • Size

    581KB

  • MD5

    13fd7a3bde68cf7de21528e301c20e40

  • SHA1

    420290deef2d0aa72be2d437b8aa5a5ca84115b2

  • SHA256

    7fbb9efd825d3fa331a6b10ec55d2c550aaad20091138f27e808048567801a3c

  • SHA512

    ee3c389d8b221a2cf058de47969cef5f28d7d752314a848158248de43135a628653e6d15b5d556b3c8e4725c461b061978a318421621c1f2945f61ac9d1c3443

  • SSDEEP

    12288:xEciKcfeIwjZ4d0cHa52bzy05qlYDf+zH+eI/hHNa273Ma40:xERpWedNM2bzyGqlYehILa27cax

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 13fd7a3bde68cf7de21528e301c20e40_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/csrozlb.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431615751.fbecabfbfbha