General

  • Target

    05961b9fb58a0b6954e02341c05808cb_JaffaCakes118

  • Size

    816KB

  • MD5

    05961b9fb58a0b6954e02341c05808cb

  • SHA1

    430a5a2d1490146c2c4d3eaf19d32ae95ca746ff

  • SHA256

    ce07dc4c18d5cee4ee343dfb9b4211308963723415d3a20c7810946c1075d665

  • SHA512

    a40a394c881b8b8a401253d2aa97953441c1ffee8c94d5e4eb0696c29edd82e6438167354f45a3c07227b7b1a0c85981aca4be07b7ded0233be02c62a3cb4fe7

  • SSDEEP

    24576:bqdgG946xxOczo8v7ZiHCY066x3OavLU76:DukgVtY5KbLUm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 05961b9fb58a0b6954e02341c05808cb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tmp.ini
  • $TEMP/~nsis/s40007/cloudwebinnad.dll
    .dll windows:4 windows x86 arch:x86

    47db5f6ea045b5e9c353754e408a7c6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/cldiasvc.exe
    .exe windows:4 windows x86 arch:x86

    865a4699dc989a6c4020da5d4bc37278


    Code Sign

    Headers

    Imports

    Sections

  • cloud-web_run.ex_
    .exe windows:4 windows x86 arch:x86

    ddd73f1778b2b258d98cb7513f53b79c


    Code Sign

    Headers

    Imports

    Sections

  • cloud-web_svc_2_96.ex_
    .exe windows:4 windows x86 arch:x86

    5eb5605105dd037280c95d1ee86efa67


    Code Sign

    Headers

    Imports

    Sections

  • cloudwebin.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    3349570131fbaa69ef5ccbf0c5cb1ade


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cloudwebinnad.dl_
    .dll windows:4 windows x86 arch:x86

    47db5f6ea045b5e9c353754e408a7c6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cloudwebintb.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    62aae4a780185490b96a2db14f7f901b


    Code Sign

    Headers

    Imports

    Exports

    Sections