General

  • Target

    3d228a5778b3286ea226cecb597135c4_JaffaCakes118

  • Size

    2.7MB

  • MD5

    3d228a5778b3286ea226cecb597135c4

  • SHA1

    caf9fb8464c63e337e02b64b7d0bf64096373dac

  • SHA256

    03886d38eda6f24f73027e50c14cb4601ff06b1d7701405cf9eecae110f6a695

  • SHA512

    4d77d5cb29b11179f342901689ea0c2fa6f86999bbe9fa77a12bcd39c493879d27828a5c0e1625dd3deb7586b46f36822d56aac3fa4e146870e327106936609d

  • SSDEEP

    49152:S9TLUJ3eDfEQ2BNL3eV7iTpOONvV6Zmr05Ny9H1WZU/KiP0rJ4JAD4x3e:S930eDfEQ2DDc7GwONjw3yO4PCOBle

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3d228a5778b3286ea226cecb597135c4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MiniObject.dll.jdiff
  • Object.dll.jdiff
  • cfrf.cfd.jdiff
  • rez/ClientFx.fxd.jdiff
  • rez/RB001.REZ.jdiff
  • Խж.exe.nsis