General

  • Target

    29e709f09575911806c61d39125a2510_JaffaCakes118

  • Size

    1.4MB

  • MD5

    29e709f09575911806c61d39125a2510

  • SHA1

    1b1734870db0b2f2ae04043a0c2bb3e72b4359aa

  • SHA256

    ab531b2122d7241313cf70b8ef804014cfe5e755d34955ffc9f1de142d8b757c

  • SHA512

    309b7ef732a00ddba7c433bf48cf1e2068afd100d41a076b8b967812ba7fdd2d2c63364de4a111401761c15d56df5600e171648410b9e339976c88b58f58eb1c

  • SSDEEP

    24576:NzHUJnbYxNWe8QUXZP893px2ilBbXnMORl288krFmfJAAP2EnbYxNWe8:NzHUJ3e4X1895x2il98ObT8krFmhAAP5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 29e709f09575911806c61d39125a2510_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    db6e66bff3da6830d0cb7b1044febeeb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Game/CharacterSkins.zip.jdiff
  • Ӣж.exe.nsis