General

  • Target

    1572948044289d698a0eb65aad1d2b68_JaffaCakes118

  • Size

    125KB

  • MD5

    1572948044289d698a0eb65aad1d2b68

  • SHA1

    591c4e3dbbad8b02934b8da079eeaeb7aadd2f24

  • SHA256

    d5ad9be953d650b0d17b25871dd06b09c7cacbd26ac3373a1b48816c22bc8864

  • SHA512

    3a8d847b1ba3e3f6b181d2d9e3bcd42ae363baaf1c82af0cc5bcfba03703bb616236f560396d0efe5b8b3862942d23d5c7bc97ed7dccdc6b3170e6f5d9f8bf9f

  • SSDEEP

    3072:U42U65mXkJzU4fZSnJuv1E1HBKikcQrcHw3/hP:UeNUKodERBKikeHg/hP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 1572948044289d698a0eb65aad1d2b68_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbasic.dll
    .dll windows:4 windows x86 arch:x86

    57c2b033a325c2955810cfe11faec459


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp