General

  • Target

    489bf79d08c30a4ce33de79a5d48be3a_JaffaCakes118

  • Size

    558KB

  • MD5

    489bf79d08c30a4ce33de79a5d48be3a

  • SHA1

    06370c2894008605930651817c47acd07edf0275

  • SHA256

    142669a421400a050d9fc4fbea40b5a811cd190b0cb4146577323dade749e313

  • SHA512

    e9830a97289f487782a8a176144392760d0b609cd94d501f7931769c1883c81a59a2baadebfe1f75425cec857944f073637447d1a3039835c8a29d9091ce25bc

  • SSDEEP

    12288:kLe4FXTMsxvXaQTG7KOd0qpfT6/oPRDQQNwt9M/9kI0jmC:kLNXh/lTG7Dd0qfTqo5DQdtq2Ism

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 489bf79d08c30a4ce33de79a5d48be3a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/otcbz.dll
    .dll windows:5 windows x86 arch:x86

    8e9b5b6e436a7821e9e4cf0ea51b2d92


    Headers

    Imports

    Exports

    Sections

  • 1429531333.ecacabfbddccb