General

  • Target

    5bf4bdd8996015dbcf8517f4bbe56cc4_JaffaCakes118

  • Size

    903KB

  • MD5

    5bf4bdd8996015dbcf8517f4bbe56cc4

  • SHA1

    35f15231f1b1320355c1ce0b4dab6ddf0b25a06a

  • SHA256

    f417a095b070301b8432ef3af9c7c7c46a8b2ef8250d1b1931ffcf542b896c11

  • SHA512

    e484ccba6ab5d937429be51f544751c2cc7f40c0fde7ce6b830f1172c9e888e4b9946a460a38e0ed8fd0d56626dcc381c2afa32be315d72e6300caed5a60c60c

  • SSDEEP

    12288:wr4zDIV1UJl9bfg2SjNpONFPe+OaNpBcWS7Eq5uKgV2Msbl9bfg2SjNpONFPe+I:wr4fs1UJnbYxNWepmfJAAP2VnbYxNWeH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5bf4bdd8996015dbcf8517f4bbe56cc4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    db6e66bff3da6830d0cb7b1044febeeb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • client/TP3Helper.exe.jdiff
  • client/TerSafe.dll.jdiff
  • ѽ¼ж.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections