General

  • Target

    232edb3cf17f2db7dfdd18815827e250_JaffaCakes118

  • Size

    213KB

  • MD5

    232edb3cf17f2db7dfdd18815827e250

  • SHA1

    2f392d778f729e2c11598c6774a5ef2fc5f984e1

  • SHA256

    cd7de7528c11db9449bec8963e58a98dc7d4cc0d375369190aeaccd9e76a1487

  • SHA512

    4b5293330b77c0082961680d0658d8aa222e7adbce93f014253033d69bd16d05f5c76b084c7abadd375315aca9486fce5467d4395331d147dde7330655a77d38

  • SSDEEP

    3072:AGW3B+DukJFU4Gib8ZDnr6YHDwqaVN/NZwiF5u7Xfw7Tn0wtBVpCcdvWLsNzQI:AJfzib4Dn3jwzVN1ZNFEPArDXdUsN/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 232edb3cf17f2db7dfdd18815827e250_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ActivationManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bd10bfd5b5c1b0aa0e7d5a323d19ec5d


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections