Overview

overview

3

Static

static

3

1baa78e963...18.exe

windows7-x64

3

1baa78e963...18.exe

windows10-2004-x64

3

$0/questbasic.dll

windows7-x64

1

$0/questbasic.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1baa78e963fc296e093c0cfa1e9e6f49_JaffaCakes118

  • Size

    395KB

  • MD5

    1baa78e963fc296e093c0cfa1e9e6f49

  • SHA1

    e9bf456eaadf754a980184298e53f556213a9088

  • SHA256

    c56190ca2cc41ca67336b6c4e39a0f1dbb419d0daa5ed67f481998984275a3e1

  • SHA512

    9a5547bd850cca4a1793373f67f59402b4e0bf8d10d0dcb66ecaeea63cfa3c33933a1dec433803835c981329914f9c59a4e13b8cef1df7966a526a0a0c380cbe

  • SSDEEP

    12288:pzdI/cXh8VrQ4IbTHGEbpLrjWckJAy7T1k:pWcN4VKxrj0lTy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 1baa78e963fc296e093c0cfa1e9e6f49_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbasic.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp