General

  • Target

    2880ec044e9cfe559871aab358f10a61_JaffaCakes118

  • Size

    581KB

  • MD5

    2880ec044e9cfe559871aab358f10a61

  • SHA1

    07af4e0b621eb259371533a026803a010dfd1128

  • SHA256

    051a3d3301aa9f0d4b06d4f7d1c631e58975e491f09fb1843da4429fb339c94f

  • SHA512

    53fdecc61f9d4f9df225f4464161d1da3c22f867d912eb2a54c235be6dfa88cacd3b10f66bb1d6771e64e1eafdac9d53a42362f41439c97cf2cb85120bc2b143

  • SSDEEP

    12288:Y8DJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+n:YGJbl+36tKPdhJ74

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2880ec044e9cfe559871aab358f10a61_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbed