General

  • Target

    27665b6915981e580868d715b5bbff8c_JaffaCakes118

  • Size

    322KB

  • MD5

    27665b6915981e580868d715b5bbff8c

  • SHA1

    ed3196bfbbea708c390ebe4971c12595b3052056

  • SHA256

    2b400838a5833fd755a46c96f21a095abd9370b5762ec192a78f78136242da27

  • SHA512

    1d34f860d16fd70c289426a69afb909e5ca7d6bdd44c567c008b5f3a22d750a19d3310c10c7956083135b93330882ed12a8b57b9ddb2197cc7e2007857a3fcbc

  • SSDEEP

    6144:gXUIpIF3V9XqViCNF3mxFjPoXUygewT2ZejlO0WYiK/CnbHJYy5:BwM9oDzowXd49W19T7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 27665b6915981e580868d715b5bbff8c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DcryptDll.dll
    .dll windows:4 windows x86 arch:x86

    0fd27a8632c1db1bd10fd3d38894d66e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $TEMP/calc.exe.dat
  • $TEMP/freebsd.exe.dat
  • $TEMP/linux
  • $TEMP/notepad.exe.dat
  • $TEMP/vidxcore.dll
    .dll windows:4 windows x86 arch:x86

    e61206a07e984b059cd47d3af6024fb4


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp