General

  • Target

    a5d20f25b5edc1485e6159aeb85cd31f_JaffaCakes118

  • Size

    337KB

  • MD5

    a5d20f25b5edc1485e6159aeb85cd31f

  • SHA1

    29419cbd7313aeb90d4657b636b56dd251f76e0e

  • SHA256

    27e6baa3b9edd378de1a34a157ba4817f3c9b717260ea85194958e8144d265a4

  • SHA512

    0f2b8c51eb4f9f4f9fdc536c59391460cebc0ef5eafaca670bb5195773c05a34b7d26566a983f4f87be4064355f63dea5e057126973a36c556217ecdc678074e

  • SSDEEP

    6144:Ic63Az3BXaJoNcM8gI+KsSwE1aW9SIyiIlPE1zsUR4aU+pLh1JzfauT01rTx:mGRXkoNczgbS/1aW9HmWbR4h+pLh1dfg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 11 IoCs

Files

  • a5d20f25b5edc1485e6159aeb85cd31f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    6c01223cb63ee4264a1cff8d0322dcde


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    06e07a9e2c8ec78ec44f1a538a1bd2a2


    Headers

    Imports

    Exports

    Sections

  • $TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderDDLR.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER0.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER2.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderSTUB.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/12e3c33540e3950d9d7ec996be5d13ee/preinstaller.exe
    .exe windows:4 windows x86 arch:x86

    dcd4f584cea06b9085635499b2756e76


    Code Sign

    Headers

    Imports

    Sections