General

  • Target

    1e039f9770017f09225e58d7759b700a_JaffaCakes118

  • Size

    186KB

  • MD5

    1e039f9770017f09225e58d7759b700a

  • SHA1

    fc1e83365f05fb98b4dc94833e430a7adc055bf5

  • SHA256

    f9ab2087217beb38c3ec3dc043aad739dac202dc422f44e49c0fb5ca6db26502

  • SHA512

    ebeb10678547b0eca642645a673e9e6309c3ba961e62d83aca95aff8a351a56c07544c92688681e58dbe66cc8e0812ab01c388d0b5e463d5c97d4ea038bf26e2

  • SSDEEP

    3072:oM1BjoYNXoKDIJBXJPG45d48j8uZmXJtP4NMtGvNOilk+qNKNtmlohi8tUUB5+Qy:oMMYNXqBBG6Zj8ikJtP4SGVdHqEUGQUw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 1e039f9770017f09225e58d7759b700a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • 3BSYBS1-DCSA_Alerts_05172015040008.xml
    .xml
  • 424 bl 4.ADO
  • Bahrain
  • Brunei
  • Damascus
  • Dushanbe
  • Glassine.m4T
  • Helsinki
  • KSCpc-EUC-V
  • LF_Disabled.png
    .png
  • Makefile.docParam
  • Monochromatic Low Contrast.hdt
  • Nwiz.dll
    .dll windows:4 windows x86 arch:x86

    c9f0346dab68473751e2102ce7d1f0a8


    Headers

    Imports

    Sections

  • VSFlat.hlsl
  • Vestibule.X
  • appupdater.exe.manifest
    .xml
  • body.bg.color.xml
  • data.png
    .png
  • default_hash.js
    .js .sh linux polyglot
  • diagnostics_na.png
    .png
  • externalhelp.xsd
  • f2.png
    .png
  • f6.png
    .png
  • file_sig_verification.png
    .png
  • hammer.png
    .png
  • html.cellpadding.xml
  • isoamsc.ent
  • itemizedlist.properties.xml
  • libimalloc.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections

  • man.output.base.dir.xml
  • msconfig.png
    .png
  • no.next.image.xml
  • pointer.png
    .png
  • prev.svg
    .xml
  • smartcard_reader.png
    .png
  • tweakDiskCleanup_pt.p5p
  • tweakNetworkingManual_es.p5p
  • vcss.png
    .png
  • video_card.png
    .png
  • yellow bl 4.ADO