General

  • Target

    164eed352ed2e39a53a35f58343656bc_JaffaCakes118

  • Size

    581KB

  • MD5

    164eed352ed2e39a53a35f58343656bc

  • SHA1

    319c272fc72106dc97ea5b4e00d89db3fb257b38

  • SHA256

    d3258ddf520cbc66f7df007bb41e6eb7b3d92f45417dbaff523aecbda3249f02

  • SHA512

    8c825a8b1d36a60d71407173b399f04e4ed55643b57a6a99770b9a8e7ca5177ad56528ff5cfb538e5350ca40e715fe9105764a0a0354128d294b3b84819db337

  • SSDEEP

    12288:MWDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+R:MEJbl+36tKPdhJ7M

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 164eed352ed2e39a53a35f58343656bc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbbeh