General

  • Target

    32dcfe16446c68dba18918ab672cb510_JaffaCakes118

  • Size

    599KB

  • MD5

    32dcfe16446c68dba18918ab672cb510

  • SHA1

    315740aeb8a5a1f3ea680ac2691508026c96867b

  • SHA256

    16e73e38a6003cd1cf85cf7d9a9484cf8ee8e32f70f586d039fcb3b35feb7dd2

  • SHA512

    24d5ab23d2733b8d9269e4539cf51e1d1b8d9555027fdcf8418d767c8037c7ad72a686d4181793ea66106bf9198c61e0052b5b3b1c4fb8d5f58564f25fa2afca

  • SSDEEP

    12288:9kd0fRqFNH2FrYtF7OYPb5K9ubyJVs/o9V4/G5OkCeLhAA4vbp0Cj:9kOCHWrYT35K9uOTGhtHeVIvV0k

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 32dcfe16446c68dba18918ab672cb510_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/qvhykar.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • 1431486120.fbdcabfbcad