General

  • Target

    5d265c3a877964e0731e8518f96e9e6d_JaffaCakes118

  • Size

    763KB

  • MD5

    5d265c3a877964e0731e8518f96e9e6d

  • SHA1

    252fe1865fba75c43bb49bc561a0d366654f620a

  • SHA256

    16f28fcff9585956cc90f812d07bc4e0d51d99eb9e0482bc65cd9e5df8f4ab73

  • SHA512

    8d863f9bb1fe7418051db7a072a804a961f8a1b83f1fa94f355b70be9ceb5638f9cff3e6ecd094e05c98bf60684c2ba4c59ac94827d78e5489c656f44c88358e

  • SSDEEP

    12288:KA6RHO3N09zl8ALjwRcmZPNdKi4BujutAfBPJTkD7d/m4Tsr3PQ3QFQzfc8vy4hH:KFRu3NEZjwVPLKi4BuitSPydCrmJg86A

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 5d265c3a877964e0731e8518f96e9e6d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/okjamuz.dll
    .dll windows:5 windows x86 arch:x86

    8e9b5b6e436a7821e9e4cf0ea51b2d92


    Headers

    Imports

    Exports

    Sections

  • bedibbhddh.hddhbbi