General

  • Target

    156492e3969734f7a65b1f43a01e66f8_JaffaCakes118

  • Size

    1.6MB

  • MD5

    156492e3969734f7a65b1f43a01e66f8

  • SHA1

    df4874621bb8f751fb139054a785d4c81454f183

  • SHA256

    dc069d466bd3570ba5ccdbcca75baa3fe8e1ebe8b6305e6ebdbfc4a90d5004c0

  • SHA512

    8fb7aab743c77a8d74fe546b57dd5e80c3499532d9c21de997a86b739242e8a2162332a2869afb14937dfefba184e2150dd5b364b22c165ad82646c5b1a8324a

  • SSDEEP

    49152:hzHUJ3epeqec+IKAKdxNbmBumhAAPl3eQ:V0e8qiIKbhmkNSeQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 156492e3969734f7a65b1f43a01e66f8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    db6e66bff3da6830d0cb7b1044febeeb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Game/CharacterTextures9.zip.jdiff
  • Ӣж.exe.nsis