General

  • Target

    2f4a6f00a5b04c92f67db18d0a86c9ed_JaffaCakes118

  • Size

    2.5MB

  • MD5

    2f4a6f00a5b04c92f67db18d0a86c9ed

  • SHA1

    b2f7547e6fcfd34778ee72cc349cf1d41f753aaa

  • SHA256

    7d20c0e0ae366c5e862032c17b180d2809133cd7970d78bef227dbc9b4086fb0

  • SHA512

    ac3780b61f4f2b1b86fcb09cc5c3935f1ed2ddf7be6fcd9b015e3ce3fb6a62c10f7ff1be9a578421dc6757eb8c78e680f1c3485c5bfc2abc5f40523f3d1efef8

  • SSDEEP

    49152:8LVxOwDV8XjzJJ3eUGxcl6/f/eTQhuhwrHkRaMjUX1PjsUDbLkAwaeKwU:8hxOwwJJ3eUmGLTQhaPToX17sUDbLkA1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f4a6f00a5b04c92f67db18d0a86c9ed_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    d9997cc22607493388b309294c30bacc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • CacheBlueScreenFix/PluginInfo/QMBluescreenFixer/PluginInfo.xml
  • CacheBlueScreenFix/plugins/QMBluescreenFixer/QMBlueScreenFixer.exe
    .exe windows:4 windows x86 arch:x86

    4d7b07ec53976a62cfa3fb635ddd05a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheBlueScreenFix/plugins/QMBluescreenFixer/gjldr
  • CacheBlueScreenFix/plugins/QMBluescreenFixer/gjldr.mbr
  • CacheBlueScreenFix/plugins/QMBluescreenFixer/guanjiafix.img