General

  • Target

    203c6f86e0dae4fc42dd67538252c072_JaffaCakes118

  • Size

    581KB

  • MD5

    203c6f86e0dae4fc42dd67538252c072

  • SHA1

    94222f1efeb93aa7072b1ae459fdd4c11be5f2f7

  • SHA256

    5fe3c87af4aa86938b10daf4ac72293125e3db639b53f577f408214c9150efe1

  • SHA512

    aa1b86123715574113dc5ac4fac624286a7f122c3c94fc865fcba3ec93d5ce3e8aae42b8370f125563f17ebec3e9eb07254250c4dfa283f823dca264b91408c0

  • SSDEEP

    12288:w19m7Owuz/MNfrcmbuZuhmtQ87BvzjCt5QAMgHnOO4vt:w1COBMNzRbwCoZCtyPrOQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 203c6f86e0dae4fc42dd67538252c072_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cfcnylv.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431853351.fbhcabfbfbbad