General

  • Target

    24e9bf09629b27661c8f8cf4f7a28857_JaffaCakes118

  • Size

    213KB

  • MD5

    24e9bf09629b27661c8f8cf4f7a28857

  • SHA1

    4175d0b2c7a04eda647ad0389cf1bd90b8422994

  • SHA256

    5a58e37f10d55fb0eba832af58f66672f2d0d0f7a14398b2066951e9bae2737e

  • SHA512

    dbe46c499df2f4da5e90b359d4386469df88b81d22f1bead226a6aaec36125547a9718cd8d7ec4bca4743b21d71da16902e680b443af0962b3baf8127ec40a7e

  • SSDEEP

    3072:AGW3B+DukJFU4uzibfstMpKR8vADh9i0x/uP7UZzpYgDTXfoP8cid8qpCcdvWLsw:AJf3ibfstbwADTi0RuPGvDzuMzUsNu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 24e9bf09629b27661c8f8cf4f7a28857_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ActivationManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bd10bfd5b5c1b0aa0e7d5a323d19ec5d


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections