General

  • Target

    6a2173834c9fc343ca62929ade72c2d4_JaffaCakes118

  • Size

    120KB

  • MD5

    6a2173834c9fc343ca62929ade72c2d4

  • SHA1

    dc512583f92a8e1c0dc9f68e4e4dce972ede2fb9

  • SHA256

    786c7c719350c64b9714a787e0b9ddba1f1101565e3aac2a2ca0d8b1543564c8

  • SHA512

    595ba714446772b5e61c8047a9716cf44afeceff23abc3ad9dcba0323fe5837e4a7a3f49b4c9bb35cdb80ab0f687ea9b7261b28f7ead9b465c9352ce93e95b22

  • SSDEEP

    3072:fQIURTXJ5eqgKJ+BCzCkTEMwJhuqmuHSfK0q1+kKT:fsdgKKkgMwCfu6K04+V

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 6a2173834c9fc343ca62929ade72c2d4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections