General

  • Target

    8d52e31585c0cc381571f7270132dcbe_JaffaCakes118

  • Size

    2.7MB

  • MD5

    8d52e31585c0cc381571f7270132dcbe

  • SHA1

    0229d634a6a86638b64389665127345de17bbf7f

  • SHA256

    01e65dfeb91ea713026f4529198eb8647c03d5d2af634f109884545b290a9dc0

  • SHA512

    c278bfd1e6ab4af1fb4eafb191031a2acfd6283cc0a13d7d97da870f6de8dc05b69c90cc7a8d97aafdd103d8f3df4fc154caea7af066937e02c001026fc6f2ca

  • SSDEEP

    49152:4p5RkiELc8gS+++PvSGc8uZtu9bZ/6lH8JSZgUnuDGhDf4/55D5AwJ7zmsscgB:4Wisc8gSrUDcxZ8tZ/wHcSXnrhU/5Aw+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 8d52e31585c0cc381571f7270132dcbe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • RakBot.exe
    .exe windows:5 windows x86 arch:x86

    28ec1f1a3201e70d2cf87edca4b78413


    Headers

    Imports

    Sections

  • RakLaunch.exe
    .exe windows:5 windows x86 arch:x86

    5e55d973e8ff3618b256b37d08eea05b


    Headers

    Imports

    Sections

  • libcurl.dll
    .dll windows:6 windows x86 arch:x86

    c16c3eae2c7b6fc2c399f17eefe76ce4


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    bf76bfdbfb2f04df3961cd140f67140b


    Headers

    Imports

    Exports

    Sections

  • libiconv2.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    5e63e66630a8ecd829ce2cfdcfa121ae


    Headers

    Imports

    Exports

    Sections

  • lua51.dll
    .dll windows:6 windows x86 arch:x86

    80bf52b97b3125477a5be403e067b9fd


    Headers

    Imports

    Exports

    Sections

  • map.bmp
  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • routes/RakRoute.route
  • routes/RakRoute.sf
    .dll windows:5 windows x86 arch:x86

    6f0e5c7559d0496ee5fd939612798196


    Headers

    Imports

    Sections

  • scripts/autoreg-drp.lua.del
  • scripts/demo.lua.del
  • scripts/ffi.lua.del
  • scripts/raknet.lua.del
  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    2063b55e294c91445f7d7c61361e1f0d


    Headers

    Imports

    Exports

    Sections