General

  • Target

    3de449f7e88b49b88b8de59e0febb197_JaffaCakes118

  • Size

    558KB

  • MD5

    3de449f7e88b49b88b8de59e0febb197

  • SHA1

    1ff62e2ec47039ddee0721a9060a64382f0f4664

  • SHA256

    85573d9a2b3e1c5f6999da0ec4b7570cb7b7a79c95b7179661e250c4cb5773f2

  • SHA512

    80d587b3080ca07f3de58d8fd2144150bf7b261ca97de9c7cc990bdb5231fb9473c9222b0ba95a33d64f7d65e415da0d15971899bb5ba1d0c3188b545298818a

  • SSDEEP

    6144:oe34R2SxxIzh36dqXEV2rnCGZG/t7FTBqTzP7n7O7L6K2Bfo7pOy:W2I2zh36VV2Gg0ZTsnz7O7L6ju7pOy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3de449f7e88b49b88b8de59e0febb197_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    ab0d6b61eda9d1dc039b5837f731d965


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    9c3e93c8dce9ffa729b703b0174c77cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $TEMP/captura.bmp