General

  • Target

    6d984083509c7ee404c50ce620a76ad3_JaffaCakes118

  • Size

    637KB

  • MD5

    6d984083509c7ee404c50ce620a76ad3

  • SHA1

    6210a0ad31884abfe64beec48cd8ded291287673

  • SHA256

    2475ffb06acbe6a1b36bcd53cd849985f55979959d8e829efadd04dbbebc803c

  • SHA512

    45c9e13fb32ffa5934861a946fab7ce0bae43d386bc6f1c474894fe90034be5bdf4484e106c46f36351f233c605969c3ea665ac95c474b5dcf1d68db24dbce39

  • SSDEEP

    12288:TUUYS8K/8hIeI8Pzqn8/9dYd2svmt1FknuFiQOFYLcc6UplYfc8vy4hNE:TxL808+AG6t1F2HYLzd86OE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 6d984083509c7ee404c50ce620a76ad3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dfstmip.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgbfbheb.behbfbg