General

  • Target

    43eb4efd4c05f1b8f3ed4f3583078535_JaffaCakes118

  • Size

    218KB

  • MD5

    43eb4efd4c05f1b8f3ed4f3583078535

  • SHA1

    644e19f9f34ac7bf8e8d023dfb65e11b62613568

  • SHA256

    333f7cf1f51392fb296823ffff75af702a012551f9b2fbe46ae50d7a18460255

  • SHA512

    014c1ae4c6a452e7113fa62061a81230d9d2b0f307e9d89662319ad01142fb9102a01c0bb99be9d9b9cbbf70dd8d1d4357e8b5d0496220594cc421bcadbe12d2

  • SSDEEP

    3072:yQIURTXJbadlU88xrFyWOcMTT79+46W+3XWB73pa9I6+o42ts+7L4QAOG/D:ysA7F8dbOcMr956W+nA25r4274L

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 43eb4efd4c05f1b8f3ed4f3583078535_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/FMlic.txt
  • $PLUGINSDIR/IMlic.txt
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Yahoo_tb.bmp
  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/accept_disabled.bmp
  • $PLUGINSDIR/bab_tiny.bmp
  • $PLUGINSDIR/back.bmp
  • $PLUGINSDIR/back_dis.bmp
  • $PLUGINSDIR/box.bmp
  • $PLUGINSDIR/box2.bmp
  • $PLUGINSDIR/box3.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/continue.bmp
  • $PLUGINSDIR/continue_dis.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/exit.bmp
  • $PLUGINSDIR/gen_tb.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/next_dis.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:6 windows x86 arch:x86

    8c822ac3e4d332dd16e1002a92e3c264


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/popwarning.bmp
  • $PLUGINSDIR/popwindow.bmp
  • $PLUGINSDIR/popwindow_close.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/v_sign.bmp
  • $PLUGINSDIR/x.bmp