General

  • Target

    3d4f9d7d1c4a1610f70540c8f494049d_JaffaCakes118

  • Size

    776KB

  • MD5

    3d4f9d7d1c4a1610f70540c8f494049d

  • SHA1

    6f5846f0abd2b5f08efd1cc1ed1476eb586e11cf

  • SHA256

    2df5b50ba808333d37840c07ced8caddb6d99988ae9d52b57c5643ed555a1b6f

  • SHA512

    115c288d904921891b7f21cd82617d610563dfcd9b4d94f3a4ceb4edcf4a680866e8ba3552b7a370f3a8d946090bc688fd0c7275e449519c830b29598f17d151

  • SSDEEP

    12288:ptSLe80v2qTuLMjaTJCBpz4Ct8SJDIkBmeU8WnBHxKveJLd1q6hYIwTuDCD:pkLeB2UuLIQJapnJPzWBRKvuLd1DHgJD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 3d4f9d7d1c4a1610f70540c8f494049d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbasic.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp