General

  • Target

    904d96756b5a0b42a80629e1180cf72e_JaffaCakes118

  • Size

    649KB

  • MD5

    904d96756b5a0b42a80629e1180cf72e

  • SHA1

    2077f2e41395c0050731ce5bb7ae7678a8d15545

  • SHA256

    2175a8a424b409a3b8ef76a1d882f5d26caf574ae46ad91b6bbf53a48474f08d

  • SHA512

    e70b6f34169d68d4ce8826457a9ecb45b153d7976038b94642b9e55968ee89240c593c1ad78c8c86e62c3ec732689686a3d6ed194a8317c7857f3874c409c780

  • SSDEEP

    12288:YSzvsW5SmvIG5OJZc7XddDqi8SEbvxrk1sKHA8Kfc8vy4hR4:Ykz5VvIG5iazdFOvEzD8644

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 904d96756b5a0b42a80629e1180cf72e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dtfwakv.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedhddjheb.behj