General

  • Target

    0da6821627bf616cd74c386dbb0181e4_JaffaCakes118

  • Size

    3.2MB

  • MD5

    0da6821627bf616cd74c386dbb0181e4

  • SHA1

    51d6b66275c2abb65d6df32447f1a36f4a72fa66

  • SHA256

    fd704cefe04f32313f803886d1fd5e61611c037d21da7c72aa364a4d749e4a65

  • SHA512

    1148a9550775450a50e25942ff1e5372747e3c9aef3d71867c70585cc3f01a82f4333ccb4763e4426ec4903cc0f444ae351c47c39b2a09404aef51010bbb3a59

  • SSDEEP

    49152:1rGBwFgg5BPi/t8dunQvSbvFflVitWKEWD2jWFoLQf4j00TZys5x86G2FISWexhX:ZGBgdbPi6PSFflV/Kbzfw0JD6+nexd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 0da6821627bf616cd74c386dbb0181e4_JaffaCakes118
    .zip
  • Antiarchive LITE.exe
    .exe windows:4 windows x86 arch:x86

    18f198bac2b71c47b4c5a3e9b7c52d3e


    Headers

    Imports

    Sections

  • MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Protect-PassLib.dll
    .dll windows:4 windows x86 arch:x86

    6e049347e490228f93433762fff23811


    Headers

    Imports

    Sections

  • Try-pass.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Updater (����������).exe
    .exe windows:4 windows x86 arch:x86

    a4b42ec3f6f75ee36398aff07fc03095


    Headers

    Imports

    Sections

  • anti-archive-pro.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d3-acceleration.dll
    .dll windows:6 windows x86 arch:x86

    8a679459baa9c700c6d9673a38beaffa


    Code Sign

    Headers

    Imports

    Exports

    Sections