General

  • Target

    445a8988102e6fe983182a1763af750f_JaffaCakes118

  • Size

    1.0MB

  • MD5

    445a8988102e6fe983182a1763af750f

  • SHA1

    619095afe3d4c3c174ba6b1f0139df29f4ce7afc

  • SHA256

    b550ee70d1e6ef957f48854c5e100fffa6605e7d263bab873a79c27df71db9aa

  • SHA512

    ed803b6b70c18af742f3cf73b9f751bf76b646945a87708ee9cad307745fa307e60bad51a8dc748a7c308584ae6311f6def21058fa072ddd6152518152dacc6d

  • SSDEEP

    24576:BepxApfQSg4eeiRiovQJS2Lxzy9bStwcDbdiQZi4mD:BerAp4Sg4AlepYEwZQKD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 445a8988102e6fe983182a1763af750f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • License.txt
  • Miranda Password Recovery Help.chm
    .chm
  • MirandaPasswordRecovery.exe
    .exe windows:5 windows x86 arch:x86

    2fe73e7b76fcf22f6e2c6830313ff36e


    Headers

    Imports

    Sections

  • image/AboutMiranda.bmp
  • image/Bottom.bmp
  • image/ButtonBuyNow.bmp
  • image/ButtonCancel.bmp
  • image/ButtonClose.bmp
  • image/ButtonEvaluate.bmp
  • image/ButtonExit.bmp
  • image/ButtonMin.bmp
  • image/ButtonOK.bmp
  • image/ButtonRecovery.bmp
  • image/Left.bmp
  • image/Right.bmp
  • image/Top.bmp
  • image/TopAbout.bmp
  • image/TopBuyNow.bmp
  • image/TopFound.bmp
  • image/TopRegistration.bmp
  • image/about.bmp
  • image/buynow.bmp
  • image/help.bmp
  • image/left_panel.bmp
  • image/list_hearder.bmp
  • image/register.bmp
  • image/top_panel.bmp
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections