General

  • Target

    35b8583f46caccf102952af60edefc71_JaffaCakes118

  • Size

    1.8MB

  • MD5

    35b8583f46caccf102952af60edefc71

  • SHA1

    b7cd403f81a0a4e7498cf998bc82cdf6eaf06db6

  • SHA256

    9733980d4662c316f578e60e3f9763926ad28a3df088132a45aa0acdc5ae0392

  • SHA512

    ce0caccd1bde49065860669a2ecc6e7fc7612e47c35a15de5515925d519ad1881b6e3b00323e68243b555c404a82bd1f95ce9c7a2cf6290ee09a4174925bf296

  • SSDEEP

    49152:eW8I21SLPwph3Y76vz8Ix0+YK2bl1Ddun:e7I2sLPwph39F0+lel9Q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 35b8583f46caccf102952af60edefc71_JaffaCakes118
    .zip
  • FacebookPasswordDecryptor/Readme.html
    .html
  • FacebookPasswordDecryptor/SecurityXploded_License.rtf
    .rtf
  • FacebookPasswordDecryptor/Setup_FacebookPasswordDecryptor.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Confirm.ini
  • $PLUGINSDIR/Finish.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/btmimg.bmp
  • $PLUGINSDIR/header.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/isWelcome.ini
  • $PLUGINSDIR/leftimg.bmp
  • FacebookPasswordDecryptor.exe
    .exe windows:5 windows x86 arch:x86

    14964ac169fe517672a9787437f656e5


    Headers

    Imports

    Sections

  • Readme.html
    .html
  • SecurityXploded_License.rtf
    .rtf
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Confirm.ini
  • $PLUGINSDIR/Finish.ini
  • $PLUGINSDIR/btmimg.bmp
  • $PLUGINSDIR/header.bmp
  • $PLUGINSDIR/isWelcome.ini
  • $PLUGINSDIR/leftimg.bmp