General

  • Target

    3a4c3fc9a01b928f227ab38e2186927d_JaffaCakes118

  • Size

    445KB

  • MD5

    3a4c3fc9a01b928f227ab38e2186927d

  • SHA1

    d2af318ad1116fc1bf01fe93e4463b17a0f66686

  • SHA256

    2e335041558df6381ff0876ba88ca5a7c7f8b4ef70c8f0beb63485d795665c08

  • SHA512

    bbd51479f01bca0b934e98cd4b33e57cf84bd019d25b4ff8bcc9164fc927601a8b212a434b12b6c9d8569209923bdb5ac27f031f8873b1f30d887aafe8f3cd3e

  • SSDEEP

    12288:uJX364+Gyxj4AmvjbiMFGpX0Bzwfc8vy4hK:uJHcjsLeT6BzF86L

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3a4c3fc9a01b928f227ab38e2186927d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/qbmrbys.dll
    .dll windows:5 windows x86 arch:x86

    09dc5a4192d0f8b5b09c4b91ec074b06


    Headers

    Imports

    Exports

    Sections

  • beehehdhca.achdhe