General

  • Target

    35f8f1ec060716927b7921d107dbc785_JaffaCakes118

  • Size

    840KB

  • MD5

    35f8f1ec060716927b7921d107dbc785

  • SHA1

    2944498e8cef8172e53ce6d1e87a3c26ddc43d74

  • SHA256

    193e22bd9929b8670537ca499afe15ef3d7d317eadcc6d80309ea52d21ee6b8b

  • SHA512

    27cfe64bb5219053a353e428584f9326bb908ae4696aef53196e310b1dc035e3b9c6a639bedaa6b96cf05c26d15be810a1860e33891558f004d8dca69771ff32

  • SSDEEP

    12288:oOV8DjNx/UDeCe/JojyfxZz7Lal4mgon0smobtUXYWCWuY1EnQhLEU//FCETmSZQ:pojn5//6l4ZGLDLDjELEEFCsLf96l4G

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 35f8f1ec060716927b7921d107dbc785_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    eee12e5135c51af3dec15edc73caa3c2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ImagePacks2/sprite_character_gunner_atequipment_avatar_pants.NPK.jdiff
  • ImagePacks2/sprite_character_priest_equipment_avatar_cap.NPK.jdiff
  • ImagePacks2/sprite_character_priest_equipment_avatar_coat.NPK.jdiff
  • ³ʿж.exe.nsis