General

  • Target

    4f2753246c3134fc201e9462e479c3eb_JaffaCakes118

  • Size

    3.6MB

  • MD5

    4f2753246c3134fc201e9462e479c3eb

  • SHA1

    9714d81107e99c1e17d5ee49dbdbda2fb27ac6a7

  • SHA256

    919271ff0427af0fa4e7fa8dcd9d830ce06e0376245f26309a2b3ad340250982

  • SHA512

    65ff18e802f0292a2e8662d98670e2098841002610952df9982f1bbb8b8934b3cc612142a3260d3da0055163fa2d95a10b55bffb4b01f4f9accafad3b2768c47

  • SSDEEP

    49152:6jHb5BMAYK75/NLFI01qUUXAn4evGGGGe3jNSzxtGwkOzLP8y3MRy7rD8ZHb5BMw:y7gclFLFd1uAoVxSzx9l9Hr8Z7gclF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f2753246c3134fc201e9462e479c3eb_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    113bfc7886d2a6fb29af8c5aceec28e5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    f7f99bdd3b6ce4a87df0ce0eebcde6c0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_cap.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_face.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_hair.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_neck.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_pants.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_atequipment_avatar_shoes.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_belt.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_cap.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_face.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_hair.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_neck.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_pants.NPK.jdiff
  • ImagePacks2/sprite_character_fighter_equipment_avatar_shoes.NPK.jdiff
  • ImagePacks2/sprite_character_gunblader_equipment_avatar_belt.NPK.jdiff
  • ImagePacks2/sprite_character_gunblader_equipment_avatar_cap.NPK.jdiff
  • ImagePacks2/sprite_character_gunblader_equipment_avatar_coat.NPK.jdiff
  • ImagePacks2/sprite_character_gunblader_equipment_avatar_face.NPK.jdiff
  • ImagePacks2/sprite_character_gunblader_equipment_avatar_hair.NPK.jdiff
  • 地下城与勇士卸载.exe.nsis