General

  • Target

    2520f6005dd43203190a230828793f17_JaffaCakes118

  • Size

    1.1MB

  • MD5

    2520f6005dd43203190a230828793f17

  • SHA1

    8df5c6d216e65e8c1bedf5e48979577a2569b909

  • SHA256

    21557ee16033865aae503b34894ffac3d921f6f17a4b1f11ca926092b315fde4

  • SHA512

    cd7bf81664c63a95c20122cd6214d38ee8e209380ab1ef23d4cd9b5cfc9cf83eac12310a336351479cc6ac8c0260d223121b614f980fee33979dba4e36952c52

  • SSDEEP

    24576:1/H+4Y7fiW786nfOaku/Sroy91+pNX8C5S+qud3s6u:VMaWQ6nfOafSL91+H8qLqdR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 2520f6005dd43203190a230828793f17_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $0/PassMem/Database.kdb
  • $0/PassMem/PassMem.ini
  • $DESKTOP/PassMemPhone.jad
  • $DESKTOP/PassMemPhone.jar
    .jad
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    11cd6df8cede073a0e00bd840833dd26


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • PassMem.chm
    .chm
  • PassMem.exe
    .exe windows:5 windows x86 arch:x86

    bdee6155bc2afd8785cda972213c3b58


    Headers

    Imports

    Exports

    Sections

  • UpdateApp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • uninstall.exe.nsis