General

  • Target

    20f3ca4537f754fd0c9b9bfe7264cd00_JaffaCakes118

  • Size

    581KB

  • MD5

    20f3ca4537f754fd0c9b9bfe7264cd00

  • SHA1

    c375510fdacc72f0235eadb9a5c2df1b4681e7fd

  • SHA256

    c94eac9232213cc54bd2ca1f8dffd4100748a437e091bba2c809a08bc8d1d6c6

  • SHA512

    c530840910d86413d9ea3f569954bf4ae53bdb3ebf03dce4b6f6a1118333179cc7f56e800b695d3d5046cd430bfda3152b6a4d4bd70326708108c8e7f0da43cc

  • SSDEEP

    12288:M3pDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+U:M3RJbl+36tKPdhJ7L

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 20f3ca4537f754fd0c9b9bfe7264cd00_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbed