General

  • Target

    1ff91861f5f22ac8cc51f2c2614ccf42_JaffaCakes118

  • Size

    5.9MB

  • MD5

    1ff91861f5f22ac8cc51f2c2614ccf42

  • SHA1

    8da408ac6e5d367b695a0dcbe3b46bbba5e7417d

  • SHA256

    a94c93619b48460ccea77a4802d6adfa3b7deec0eb2c5ce0146ab85e59c6083f

  • SHA512

    98e6a6bad38316ebc8b5689c35284022a303ff47f492d78d08bbd4f84f3293491b95210f91a9befb31b7433202abec3f1e39df925e7c6fd8b8fb4364670519b3

  • SSDEEP

    98304:63mPGbOvpXj4bgr+Rx3nIdmeN7Ez02L6X7Dqbrc4pz4V7iN5qND5vICC0tu:6WPGbmz4btmdN9PqbvM8/qLgXv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ff91861f5f22ac8cc51f2c2614ccf42_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    d9997cc22607493388b309294c30bacc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/AndroidAssistHelper.dll
    .dll windows:5 windows x86 arch:x86

    8cb05b26377d0b0c7613fa28a8b0211d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/ConnectService.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/PluginInfo.xml
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.dat
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.exe
    .exe windows:4 windows x86 arch:x86

    e557ffa0e556d4480fafeb72b60ca60d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.rdb