General

  • Target

    2ce96884ee0b687a7fbcc8a6a2b73e2c_JaffaCakes118

  • Size

    164KB

  • MD5

    2ce96884ee0b687a7fbcc8a6a2b73e2c

  • SHA1

    08a5ede30b800c4c00afcc366d1c3c436ecfcadc

  • SHA256

    89ccf6fee7363964715e373b2452d3f64be462618159dc0f1093ba2c649d1541

  • SHA512

    d89ad903e6f3604856a78fbabd2740d9e682d5084c79657f3bc97c9e9958b1c64999dcd7d11aedadcb8331ac8bcb3b8299c7ec9f7b395dcdea71fd76fd91c940

  • SSDEEP

    3072:IQIURTXJAnl8XBa4Vs8h6acB9pT03Lrv75hU0twXXK5m3PNKhd:Isal8U4V3w7T4Lrv75d86qohd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2ce96884ee0b687a7fbcc8a6a2b73e2c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstPath.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WelcomePage.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/installpathcn.bmp
  • $TEMP/installpathen.bmp
  • $TEMP/instpath.ini
  • $TEMP/partner.ini
  • $TEMP/welcomepage.ini
  • CrashReport.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections