General

  • Target

    499a2054190a8499bdab685787c8f128_JaffaCakes118

  • Size

    119KB

  • MD5

    499a2054190a8499bdab685787c8f128

  • SHA1

    a795568ae37fa989a21881bf5ae8eebf27444ddc

  • SHA256

    4d94951154c4f72868b068959fcc14ab89172b5933cbeefec130ac8f41887ccb

  • SHA512

    31f1fddff167bdeb83e0d4aedbda90a2a47d191f8d1c9e5d158b0202a0df1c6174dc75fb488658d46619a235a9dd8ceeef3c2017f764c69561a4bd7d9164a9fd

  • SSDEEP

    3072:JQIURTXJleqgKJ+BCMCP6x1wotrZrbpRRnRyoLhyt:JslgKxPu1zlrbTlRyoL0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 499a2054190a8499bdab685787c8f128_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/idotnet.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections