General

  • Target

    4c4f3b27cbd76545c97c36ee32ff86b3_JaffaCakes118

  • Size

    5.3MB

  • MD5

    4c4f3b27cbd76545c97c36ee32ff86b3

  • SHA1

    6008b4165d41399011365e806c6e05738c174321

  • SHA256

    8b6c95535beccec81f4b2515751e14f34fb57554f4b7ee778c059074f6632fe5

  • SHA512

    2474f95c5722971b71eb7815260c63225c726bf63d74b5849cae59abc47fa3e5dad63c7b755f0f577061768b48dd229445b3ac28e63cfd91c72d3179b79bfe26

  • SSDEEP

    98304:GGrV8cQoz/cv+Y5xfppWcFPChbIBiyuVWEXFl4RiPyoyon8xQySdkow8nlR0xa3H:GiQWEv+Y/fTWeCsVu0EX7PyoyopySPHz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c4f3b27cbd76545c97c36ee32ff86b3_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    80ebe2c612a758bd66058fcb4454ddbd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/af_proxy.dll
    .dll windows:5 windows x86 arch:x86

    4f728f7078063896552a0f889c1c2f43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/af_proxy_cmd.exe
    .exe windows:5 windows x86 arch:x86

    16e930066676646cafdf9ce70daf22a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    39fe72cb36dbf0e6f6e7f1d12a53c7a9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    07761085e6d5abbc4cbf0976d6b9a264


    Headers

    Imports

    Exports

    Sections

  • $TEMP/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    f99f426f87c1dc54957f7483f969139b


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections

  • HssWPR/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    f99f426f87c1dc54957f7483f969139b


    Code Sign

    Headers

    Imports

    Sections

  • bin/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    f99f426f87c1dc54957f7483f969139b


    Code Sign

    Headers

    Imports

    Sections

  • bin/af_proxy.dll
    .dll windows:5 windows x86 arch:x86

    4f728f7078063896552a0f889c1c2f43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/af_proxy_cmd.exe
    .exe windows:5 windows x86 arch:x86

    16e930066676646cafdf9ce70daf22a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections

  • bin/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    07761085e6d5abbc4cbf0976d6b9a264


    Headers

    Imports

    Exports

    Sections