General

  • Target

    859e67b1ed3fbd7e9e01dd7ccc8dd641_JaffaCakes118

  • Size

    16.7MB

  • MD5

    859e67b1ed3fbd7e9e01dd7ccc8dd641

  • SHA1

    bca062a4f1691ddc6ead6fc648c3e81cc452a121

  • SHA256

    7b68b100c48239191d530410f303d3ec75c431f13ae7e131fc67fb7e2bfa8fa2

  • SHA512

    fbfe3e534a712ef02f862dcb53ce1086ddd88402b680efdab922e12e83ac598c95e43dcd05ffa630aab97934e7ff0752a6c637fbd7a5f06fc747da49435a215e

  • SSDEEP

    393216:qd6TmU/Ekhooc/a45mI/MZs0AXagQC/QsZ8r9VJKquC:qd6TJ/9mb/aRI/MZ5/KQsZ85VoJC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 859e67b1ed3fbd7e9e01dd7ccc8dd641_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    d3b0357e5a9df93304cb6f852ecac3b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsSessionSIDW.dll
    .dll windows:5 windows x86 arch:x86

    b3031de3a4e382143eb2236474719dea


    Headers

    Imports

    Exports

    Sections

  • binary_archive_converter.exe
    .exe windows:5 windows x64 arch:x64

    e6d6017ae786dd20e7c1e75920d499e8


    Headers

    Imports

    Exports

    Sections