General

  • Target

    2a4d2cf1396311c6fb472090b5946148_JaffaCakes118

  • Size

    5.3MB

  • MD5

    2a4d2cf1396311c6fb472090b5946148

  • SHA1

    d3b240d51e1ca91b3a887b93657ebc1e8471efbd

  • SHA256

    d95fb9cf414b177d8d577389398c9220e60d4d5fd3744fccb0cdeb973b21e7ec

  • SHA512

    ffb7ace1c37a0c08481b27897f9e0b655377cf7ffb769e771e3dcda41dddf1b8291b0bd59cb4d9a510211ae3a6f26a4f58e4f0e88881d0d5d0037e81816d4cdb

  • SSDEEP

    98304:GGQSV8cQoz/cv+Y5xfppWUPChbIBiyuV1Of92gXFl4RiPyoyon8xQySdkow8nlR9:GGQWEv+Y/fTW6CsVuvOwgX7PyoyopySd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a4d2cf1396311c6fb472090b5946148_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    80ebe2c612a758bd66058fcb4454ddbd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/af_proxy.dll
    .dll windows:5 windows x86 arch:x86

    4f728f7078063896552a0f889c1c2f43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/af_proxy_cmd.exe
    .exe windows:5 windows x86 arch:x86

    16e930066676646cafdf9ce70daf22a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    39fe72cb36dbf0e6f6e7f1d12a53c7a9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    07761085e6d5abbc4cbf0976d6b9a264


    Headers

    Imports

    Exports

    Sections

  • $TEMP/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    f99f426f87c1dc54957f7483f969139b


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections

  • HssWPR/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    f99f426f87c1dc54957f7483f969139b


    Code Sign

    Headers

    Imports

    Sections

  • bin/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    f99f426f87c1dc54957f7483f969139b


    Code Sign

    Headers

    Imports

    Sections

  • bin/af_proxy.dll
    .dll windows:5 windows x86 arch:x86

    4f728f7078063896552a0f889c1c2f43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/af_proxy_cmd.exe
    .exe windows:5 windows x86 arch:x86

    16e930066676646cafdf9ce70daf22a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections

  • bin/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    07761085e6d5abbc4cbf0976d6b9a264


    Headers

    Imports

    Exports

    Sections