General

  • Target

    0f45894b8681e529d82a11cd47ffec68_JaffaCakes118

  • Size

    264KB

  • MD5

    0f45894b8681e529d82a11cd47ffec68

  • SHA1

    96c1f8d42facf8c6b05f98cf7d06c72c871401e4

  • SHA256

    d632c483b1d174def9925e8ff07229eb75821da301cca2a55e0e51fe9d423582

  • SHA512

    0bc101d657c3905911b323cecb63207d6513c1f72f9bd95c6be2ea63583ca7f0d44eb2febb518b2b97256cb6e99069ad8ef187c48be442e5344000897bf6d59d

  • SSDEEP

    6144:AJfMKibIHQuwqk20Ii55die8A9+n0xiUsNve:2MNbIXwqWIC5AXH0BsNm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0f45894b8681e529d82a11cd47ffec68_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ActivationManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bd10bfd5b5c1b0aa0e7d5a323d19ec5d


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections