General

  • Target

    4d35bc163be5d42deb81f80f9a918f85_JaffaCakes118

  • Size

    7.4MB

  • MD5

    4d35bc163be5d42deb81f80f9a918f85

  • SHA1

    f60bbe4cd0fc8bea8b4f6c6ba838dce4b7bc4eeb

  • SHA256

    f935bf2df481bc1783107fa52c25f42ca72b18fc1b547907b5ce541e3b739310

  • SHA512

    94d0aed5605d4f092dae71035882c478772ce975aa7913f9ca331e825cae6768eec5270164e4228b9fe63d221d9c85c2d0bd19764fa4ddec157ce507621d4ce3

  • SSDEEP

    196608:e9dKTopySPHnlR5ywa9j8nWSVbPKfqIgT/VA23IIdCkOnJtBD:e94TopySHnly8PF9A2R0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d35bc163be5d42deb81f80f9a918f85_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    c5514ef21f1d7a664125019b8730298e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallerBitmap.bmp
  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    39fe72cb36dbf0e6f6e7f1d12a53c7a9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    d7f5195a88cb8bf6645b795db5a0043f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections

  • HssWPR/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    d7f5195a88cb8bf6645b795db5a0043f


    Code Sign

    Headers

    Imports

    Sections

  • bin/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    d7f5195a88cb8bf6645b795db5a0043f


    Code Sign

    Headers

    Imports

    Sections

  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections