General

  • Target

    5b7340c0b94f912c17ce574232608495_JaffaCakes118

  • Size

    5.3MB

  • MD5

    5b7340c0b94f912c17ce574232608495

  • SHA1

    df4b6ebb0c4ec946a454af9edcb3a912f1b6d231

  • SHA256

    468dc2e413944b1fd4c998e54eddcc769abe3a130c05498915632e851fd240e2

  • SHA512

    03d9aabfc802992b861bfb9fe202a6801dcae1327b7732d91259cb1b8f12d19ce72223c43a6fab393b9350e38af8465b29adb54f8cb1cb66c0684abbdad379c2

  • SSDEEP

    98304:bUnipKZ9ni7huHF1c3J9MjeUWYNwokio21BSpSK1Q3y0vL7ETMK04c5:bUnipgR0huEweUJpo2Gv0z7Eop

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 5b7340c0b94f912c17ce574232608495_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMPROGRAMS/Χ/.lnk
    .lnk
  • Help_ch.chm
    .chm
  • ZoGo.exe
    .exe windows:4 windows x86 arch:x86

    f433e7fcc51e68080022754836705744


    Headers

    Imports

    Exports

    Sections

  • language/zoGo.ch
  • language/zoGo.en
  • openBook/4.SGF
  • openBook/5.SGF
  • pigu.zogo
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • .lnk
    .lnk