General

  • Target

    21ed9c018c293d3d4ba17068f91e47a6_JaffaCakes118

  • Size

    644KB

  • MD5

    21ed9c018c293d3d4ba17068f91e47a6

  • SHA1

    4e2228ed54527f1a84584b7fbe5fd7bb189d00eb

  • SHA256

    f0f74be816100c073262999939039f9ac3308c1c65ae482ce396d392e1ced559

  • SHA512

    2042beab3a65709826bd6bf7801e3dbdcf54bde5972896157eb781cfc86361cbe6ac011e666130972c7df892f1c3e53e5d404a3b5bcbd6a5658d35a7104d7769

  • SSDEEP

    12288:15SJWzfy1t3Mloa16NstCWYx6O0UksCsefC1W7IYHUfc8vy4hp:15oWW1GztGx6JUDYC1EIYZ86O

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 21ed9c018c293d3d4ba17068f91e47a6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/evcqdwp.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedfhdafcd.dcfadhf