General

  • Target

    20924a38826ea0986ed2378bdce278f3_JaffaCakes118

  • Size

    581KB

  • MD5

    20924a38826ea0986ed2378bdce278f3

  • SHA1

    9a3722e5c21f72f6687d1927976a324640172624

  • SHA256

    a859d31cf55b0f3f5d7e0dc43c4b180c7819f30fced6cc1c074ac4d65072e631

  • SHA512

    ea6813f797438cc96638b93b21eb80a125bf859a6d509e3a642f64449b7abd90c09f6c913891277f17c62b2a53886454c48bab405460515b13be480447fc450d

  • SSDEEP

    12288:IE8DJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+E:IhJbl+36tKPdhJ7N

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 20924a38826ea0986ed2378bdce278f3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbed