General

  • Target

    63db7a434f0a512fa18fdf79acc240d4_JaffaCakes118

  • Size

    142KB

  • MD5

    63db7a434f0a512fa18fdf79acc240d4

  • SHA1

    0fa5b10ffe59b9f4c7807c678dde30d663353f7d

  • SHA256

    9d356673c32b268ba79dc42555e8a8f613e30603c6c357645c63f3167d10580e

  • SHA512

    2249fbcc37c47ae68e7d5600cf840cb22cc73aefc7177ee8b3639b602378a9669ba3175a7e5e3744b58514b2e4a13783c3cfdca7cdb1c9bda0c3b6d8e6cf1982

  • SSDEEP

    3072:KnOn7t7XpdpCCTg/sxFgJaeqgKJ+BCNCe3b5+BSl3d/XGB3J+TWVklv7YQCm:KKpdcCrTdgKM45n3hWMWV6v77

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 63db7a434f0a512fa18fdf79acc240d4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    62dbaf939091253e23f58cbf28247157


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections