General

  • Target

    2d7a3e40d77aa9368d100c37dd06e7fe_JaffaCakes118

  • Size

    142KB

  • MD5

    2d7a3e40d77aa9368d100c37dd06e7fe

  • SHA1

    cf1ae7763928405d186d7b87b275cec1c2c8267c

  • SHA256

    585aed2b101897ea67835149be55b67654f44177ff35fde4e2be6fdcea83c493

  • SHA512

    8a850ccfcd499fe321efba8779d4758381fb38b5801806fcf6c8ab50ffc641198866375b29f26ac27c43dd0fe2544dafb0dcf836fc4d7bcad465b5f3dfa49198

  • SSDEEP

    3072:U42U65mXkJzU4zXPiahYbGMykRm05G61vjghtkTCIbwmJ0Va:UeNEhYyMykL1shtkTCVY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2d7a3e40d77aa9368d100c37dd06e7fe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/basicscan.dll
    .dll windows:4 windows x86 arch:x86

    0a58a5b1c0f322905a4f0b7a6a2b858e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp