General

  • Target

    023b5f80a3d6fb6eb2f73fecd716b3f7_JaffaCakes118

  • Size

    511KB

  • MD5

    023b5f80a3d6fb6eb2f73fecd716b3f7

  • SHA1

    45b54172e18ae01fc6ea06c608d2abc215c4bde2

  • SHA256

    d6963188650b4e09da0a75196c36e0427b6537b33dbdbdeadfb717b2f336aa18

  • SHA512

    9665c7d541f56992f11948c3e67421b3d4060da905c2d0ea0eca268b42d4b3ec115eeafbf5b30d71891d30f0e48a96f9c2d9a5bcb9bceda0f1188047a02018b8

  • SSDEEP

    12288:6Et9KjzqsK5abV9779WWZ3/h5hDvN/sKTEW4MBepD9AvgSbzICECYaJ9Caxaz41W:6Et90K5abI4h5hN/lt4MMps/ICECYaJ0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 023b5f80a3d6fb6eb2f73fecd716b3f7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • basis.xml
    .js .xml polyglot
  • custom_contry_script.js
  • icons.bmp
  • inst.bat
  • ix_quick.crc
  • ix_quick.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c9b08ec0caf9697665b87b32355d94e7


    Headers

    Imports

    Exports

    Sections

  • ix_quick.inf
  • logo.bmp
  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    799e28bcbf4e94ca50e4b0a2c283ab7d


    Headers

    Imports

    Exports

    Sections

  • separator.bmp
  • tb_Espanol.xml
  • tb_Francais.xml
  • tb_Italiano.xml
  • tb_Japanese.xml
  • tb_Korean.xml
  • tb_Nederlands.xml
  • tb_Norsk.xml
  • tb_Polski.xml
  • tb_Portuguese.xml
  • tb_Suomi.xml
  • tb_Svenska.xml
  • tb_Turkish.xml
  • tb_dansk.xml
  • tb_deutsch.xml
  • tb_english.xml
    .xml
  • tb_english_uk.xml
    .xml
  • tb_schinese.xml
  • tb_tchinese.xml
  • tbs_include_script_030816.js
    .js
  • uninst.bat
  • version.txt