General

  • Target

    a1f87bc78db0547b02f43592a16d3297_JaffaCakes118

  • Size

    652KB

  • MD5

    a1f87bc78db0547b02f43592a16d3297

  • SHA1

    559f79da29cc91686d30e72d0aece37576c8c7f5

  • SHA256

    060fcaec7c45ad710cc45da00e779a3b76a6a44a27b77876a848f06bc46dace9

  • SHA512

    0ae26dff40281d494b2199cca379f88a04d4bf25b04a20cecc34e93a97890489548da95fcffb9cff74beb980c54e0d5e1419b58502476262d31f0129dab47287

  • SSDEEP

    12288:PVqVD+ZdZCBiknmpXojMWmOhykiQnCQ7m1vAl8iLbFd05AGsTfyqMM/D/5fc8vy:PSD+Z3MmpgMWmOhypsFm1vCq5AVfCguL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a1f87bc78db0547b02f43592a16d3297_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/kvnywmo.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedfajdddc.cdddja