General

  • Target

    256bea17bd4bf182cc9772011681fa08_JaffaCakes118

  • Size

    321KB

  • MD5

    256bea17bd4bf182cc9772011681fa08

  • SHA1

    3d1e1035980897db6a5d7fe141cbe5040ea51e9c

  • SHA256

    ee8373aae476616333158b9b7a0057aa0c588fce2267fac0aaa1a21eacb0371d

  • SHA512

    4bb8b212e92cc94b0c88ac003864ba77d6d38d73b8a4ba255615b8813864802742abcdacca9ed696cbcea74aa4335f5a9cdbac9280056790b4f4f69bfea0c936

  • SSDEEP

    6144:gXUSzhAZDsWbdk0PCLOTuTOGBecm1OvbID0rW:BSzhAZpJk0PCSuQvZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 256bea17bd4bf182cc9772011681fa08_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DcryptDll.dll
    .dll windows:4 windows x86 arch:x86

    0fd27a8632c1db1bd10fd3d38894d66e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $TEMP/calc.exe.dat
  • $TEMP/freebsd.exe.dat
  • $TEMP/linux
  • $TEMP/notepad.exe.dat
  • $TEMP/vidxcore.dll
    .dll windows:4 windows x86 arch:x86

    e61206a07e984b059cd47d3af6024fb4


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp