General

  • Target

    45183ce88f648c6b3fc0f7ff86e6bd22_JaffaCakes118

  • Size

    6.0MB

  • MD5

    45183ce88f648c6b3fc0f7ff86e6bd22

  • SHA1

    df01007565c6f9abcab5514309dffb79a2b0764e

  • SHA256

    37d973a6b74b1919aab1518708fa91d14792b4218dc177d339c51e88d787535c

  • SHA512

    45d214e36cab3809f8b722701822603a7eb6be9c5b58f6803f2dab8be5d923f19f92cb274749d4283f5c98a41f8561c3bc0e34f0288dbc4de85412d84d108e54

  • SSDEEP

    98304:13fWCZEpaxdPBcaSWPVsF4qFyweY7WS5uOWf7GXKMdIY4EdlUflG0G7AGIPlZg:13+oPjPOa4FHyF8WSAP7M5d5CKPWlZg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 45183ce88f648c6b3fc0f7ff86e6bd22_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    d9997cc22607493388b309294c30bacc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/AndroidAssistHelper.dll
    .dll windows:5 windows x86 arch:x86

    cdffc32f3feca11145126e07f308a5ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/ConnectService.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/PluginInfo.xml
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.dat
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.exe
    .exe windows:4 windows x86 arch:x86

    4010797542c869fe3a177576ddd9401b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.rdb