General

  • Target

    4f3bb767153eb57b64deea529d404c03_JaffaCakes118

  • Size

    677KB

  • MD5

    4f3bb767153eb57b64deea529d404c03

  • SHA1

    96cbc0b28957682701dc3474c079754bc5bc8dde

  • SHA256

    04888b0a8f9f766595fab6f86341a4a1237d47fdbc49ba3bbb67da0558c43954

  • SHA512

    15b41952ccf72aab88508c2cbc8a855e803dd5eadef9ff22194b7750f6470b85a6e320e51cfbd1a06b40fd8a7d0a08ffb37ba4c2c293051082f9ec4ac398e4f7

  • SSDEEP

    12288:WFPEUWOpeZP2Hx3htbkP5QU1yZRcgDvFzMBe4bX/zg5c810eYuoJvqO:WFPNVZRrbkP5j1yZJlMBe4bX/zgOhlB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 4f3bb767153eb57b64deea529d404c03_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/kwgahlb.dll
    .dll windows:6 windows x86 arch:x86

    ef0395c3130920c1f8c8dc12ea63a782


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1432209682.fcbcabficcad