General

  • Target

    0b61be3e0d4b09c846cb438d53a6d1c8_JaffaCakes118

  • Size

    352KB

  • MD5

    0b61be3e0d4b09c846cb438d53a6d1c8

  • SHA1

    7a7742e2389a11d2003701935fe48f1dd8eb7cbe

  • SHA256

    18db6ab835c7df5cc4f3865462899bec753adabb8e89a1d3192a1316f46df8ad

  • SHA512

    dc9b031167a70d01633d8c4d6cf10192221b9530e53b4269d0907fa21dde8a4be82b600853d3e71c8ea71907e594b3a0cb48cd5555ec90c94e16436949dbaa88

  • SSDEEP

    6144:hgJozG382YF8WgcdET56NtfLjQw4VGMGCoxLXIBtWhtaoY7FSt0c+gLXBVp+prG:RqNVcVjQ+3XY0h4b7FY+gLYG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 0b61be3e0d4b09c846cb438d53a6d1c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • ComDlls/LinkSimulate.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d610efff26feeb97f00e3f202df7a666


    Headers

    Imports

    Exports

    Sections

  • ComDlls/TDAtOnce.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Profiles/AyuConfig.ini
  • Profiles/UserConfig.ini