General

  • Target

    3fd4648bd0cdb99ba930f96f7bb86aaf_JaffaCakes118

  • Size

    455KB

  • MD5

    3fd4648bd0cdb99ba930f96f7bb86aaf

  • SHA1

    158524de608fac4c2095ef2be3222b7d61e7a7b4

  • SHA256

    74d164503de6eac25b4b1c371d510f4ab26b4bc4607261457450bcf058dee24e

  • SHA512

    0535d6e73f4da66712012b179e33ce48bac5604d1cc3fa4261db20f70e640ef37943506ba42cce4520b6bb1a497dd9e274ea9b32683c0cbe576d57f4ca138d12

  • SSDEEP

    12288:ljq9eP6jNOElz0v3CemFZ/pskt3degRhwL9WLTwOgxno:pMBjNT0v3ZmFZ/pVfEL9Dxno

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 3fd4648bd0cdb99ba930f96f7bb86aaf_JaffaCakes118
    .rar
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Interop.IWshRuntimeLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Interop.Shell32.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • License.txt
  • Startup Defender.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Startup Defender.exe.manifest
  • start.ico
  • stop.ico
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • 新云软件.url
    .url