General

  • Target

    0454b2a544ff9f520e0a44d30b4d72c6_JaffaCakes118

  • Size

    2.0MB

  • MD5

    0454b2a544ff9f520e0a44d30b4d72c6

  • SHA1

    1d85bf855025d75d1ae3f256424be298242f1773

  • SHA256

    f7108952276abaaa163574a72b03a6d306c8ec34ff57683b849f7e7da89c7a16

  • SHA512

    c299d43c81724735b406af19f873ee179661f97032a17e37ba4b9656b6c24e68521dc89a20462defabb2f902174bce22dda6e37607af49a0890544f11cb3ffba

  • SSDEEP

    49152:fGPM+cs3RRzHqeFQ19mkhH06nXONqPmTTsQNZO:OUDsjTq/Tmq0YXONquTTsak

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 0454b2a544ff9f520e0a44d30b4d72c6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Firefox Password Recovery Help.chm
    .chm
  • FirefoxPasswordRecovery.exe
    .exe windows:5 windows x86 arch:x86

    f0ef321b5c470fdf84d119a8e6329578


    Headers

    Imports

    Sections

  • License.txt
  • image/AboutFirefox.bmp
  • image/Bottom.bmp
  • image/ButtonBrowse.bmp
  • image/ButtonBuyNow.bmp
  • image/ButtonCancel.bmp
  • image/ButtonClose.bmp
  • image/ButtonEvaluate.bmp
  • image/ButtonExit.bmp
  • image/ButtonFromFile.bmp
  • image/ButtonMin.bmp
  • image/ButtonOK.bmp
  • image/ButtonRecovery.bmp
  • image/FromFile.bmp
  • image/Left.bmp
  • image/Right.bmp
  • image/Thumbs.db
  • image/Top.bmp
  • image/TopAbout.bmp
  • image/TopBuyNow.bmp
  • image/TopFound.bmp
  • image/TopFromFile.bmp
  • image/TopRegistration.bmp
  • image/about.bmp
  • image/buynow.bmp
  • image/help.bmp
  • image/left_panel.bmp
  • image/list_hearder.bmp
  • image/register.bmp
  • image/top_panel.bmp
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections