General

  • Target

    658710f2fadb534bb06e264d1bb80152_JaffaCakes118

  • Size

    928KB

  • MD5

    658710f2fadb534bb06e264d1bb80152

  • SHA1

    683939eb5a2e9baf90a3848c5675d45bc42e8804

  • SHA256

    5c00329d6442fd36cd69748c76243c7490af947891420e18dcb362d76484d1b9

  • SHA512

    12b2a68784b4ae30d8bb9fd31e2c2b6c60ec18fc4df7bf2a01acea5cf7d7f9d0f32d99bb198b3229e45744845c23f5a998d3324fce7762982229505ec52c234d

  • SSDEEP

    24576:mnpOSoCZGjNGyvlxbQKo/OMiieNCWGjNGhy:mnpOSbE7Tb4OMMcLWy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 658710f2fadb534bb06e264d1bb80152_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Licence.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/mznumbuknad.da_
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcEx.dll
    .dll windows:4 windows x86 arch:x86

    fd87672ab679151270a197c960d51ac5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/winnumbsvc.da_
  • mznumbrun.da_
  • mznumbuk.da_
  • mznumbuknad.da_
  • mznumbuksvc.da_
  • uninst.exe.nsis
  • winnumb_uins.dat.nsis