General

  • Target

    651576a11e022e664d468be2c2bd766c_JaffaCakes118

  • Size

    5.5MB

  • MD5

    651576a11e022e664d468be2c2bd766c

  • SHA1

    a496bf4b3ca771d160a80e33a9e0dbfaac4d15e3

  • SHA256

    da24c1d3c295ca9fbca353102abcb408b5b4d7930a7c0d4cbc02e4d01e288154

  • SHA512

    3e2c656f7e052170b7ed0d4f1462d170bc69e485fc5da205762455cb605b4dbc5fc22b13f07985e099da9acee1c0a7d36d1509437d6de4120bb80ca5375a4d1f

  • SSDEEP

    98304:DTqRogK00n9ULn8xQySdkow8nlR5yerIYQhCqjHwvLzBK1mXfGthHucbNNtSCmOt:D+dKTopySPHnlR5yf70DzBfG7HpxNnJt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 651576a11e022e664d468be2c2bd766c_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    c5514ef21f1d7a664125019b8730298e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallerBitmap.bmp
  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:5 windows x86 arch:x86

    39fe72cb36dbf0e6f6e7f1d12a53c7a9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    d7f5195a88cb8bf6645b795db5a0043f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections

  • HssWPR/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    d7f5195a88cb8bf6645b795db5a0043f


    Code Sign

    Headers

    Imports

    Sections

  • bin/HssInstaller.exe
    .exe windows:5 windows x86 arch:x86

    d7f5195a88cb8bf6645b795db5a0043f


    Code Sign

    Headers

    Imports

    Sections

  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    1354d66e3116f4a24255915dc97a0cdf


    Code Sign

    Headers

    Imports

    Sections