General

  • Target

    21eee6d41da9c1e1491489ea9841b35e_JaffaCakes118

  • Size

    576KB

  • MD5

    21eee6d41da9c1e1491489ea9841b35e

  • SHA1

    2c2e37c0c4bec08d96de8c6b9d4b9b9bf67daf9f

  • SHA256

    b8cffafd76c1dcc43572c532d43d3a22ba93c90a751a9cb1bba598801db81a35

  • SHA512

    9d9a852ebe63dddbb52a8d12a94ce8300e4218513cfd31a0a51aa34a5fb642c3f34e65d9b7503980831bfc2623e58117cd59e11242573eec884aefc53ef05f6e

  • SSDEEP

    12288:m2jNdarpnfmdWpVLXgJqmu2cGIsgZK35B1MEdLlMJZx0gpnDvR:m2jNoFnfmApCPu2BIbKpB1MEdpwZx0gX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 21eee6d41da9c1e1491489ea9841b35e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/fntiv.dll
    .dll windows:5 windows x86 arch:x86

    8e9b5b6e436a7821e9e4cf0ea51b2d92


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1429369320.ebicabfbcajb