General

  • Target

    5f9bc492bad347410583dc05267c035e_JaffaCakes118

  • Size

    5.2MB

  • MD5

    5f9bc492bad347410583dc05267c035e

  • SHA1

    44065fdd7ce627ebb495970c0126f201d87f8eef

  • SHA256

    d63f00c563af3524991b92e33c76219f62956f6af1cf7d6431f7eaa3f48896e4

  • SHA512

    47029922830e584d5c4beb11853add4213789017e94ae36324ec886596f72f5eca75a8b4e700fc652c321c459711bb62acd856363918cba988c77edf6734ecc0

  • SSDEEP

    98304:ZiRhOg5mqg7xJUn8xQySdkow8nlR5yeFIYQhCqjHwvLzBK1mXfGthHucbNDOlRic:ZsX5ySpySPHnlR5yX70DzBfG7HpxCGIP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f9bc492bad347410583dc05267c035e_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    c5514ef21f1d7a664125019b8730298e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallerBitmap.bmp
  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    39fe72cb36dbf0e6f6e7f1d12a53c7a9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    c35f0e1c8295158a2a94068181249719


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections

  • HssWPR/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    c35f0e1c8295158a2a94068181249719


    Code Sign

    Headers

    Imports

    Sections

  • bin/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    c35f0e1c8295158a2a94068181249719


    Code Sign

    Headers

    Imports

    Sections

  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections