General

  • Target

    40d72be6aeff13fca091613acbb256d0_JaffaCakes118

  • Size

    514KB

  • MD5

    40d72be6aeff13fca091613acbb256d0

  • SHA1

    80546976a8cf0f4b704641c4183b6a10e1aee28b

  • SHA256

    c139d36d423f84363f6397704c85d9fe26e7526805899f7e962c2e53daf2e0a1

  • SHA512

    2915530fdaab999ca7b186a00867212648c08608cb9925d86dd14de1840c0b8891442a1a1e6a8b6c8b56ab234b8b03fd9ea4143ee32ca5aacc27ea80d673465c

  • SSDEEP

    12288:p+AIyJxIqngNnv7TLk5Drsb9BFJgRufaC7+Cs6Hz9b:p+AhxynvXAdy9ZgRbCbs6Bb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 40d72be6aeff13fca091613acbb256d0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbasic.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp