General

  • Target

    6f187bf839898a73571f36f46873cc6e_JaffaCakes118

  • Size

    3.5MB

  • MD5

    6f187bf839898a73571f36f46873cc6e

  • SHA1

    e4cd7e23e87aa851e5386d466292ba2ad5dee8ec

  • SHA256

    fc202ccaebc1dbf0a876afdd43d7d4dc8b08489a832dccfe78e0decb5c29cdf7

  • SHA512

    5449a854e01a119ec8848a564162a6d1bea60b098b7458abfc929ba5bccf3cda6e28f38f7408413b4f365e2b81627e1038ce2c5663e542ad8899704cc1e7ba1e

  • SSDEEP

    98304:/ny4P1jP8t/pGqisiMDhsaXHBgPbyWqtD9VyB7cHIh3tR:/LPiYqbdB3BsmTO7cMH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 6f187bf839898a73571f36f46873cc6e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • CrashReporter.exe
    .exe windows:5 windows x86 arch:x86

    b69a8e40cb7bad48b48bed9ecf25e468


    Code Sign

    Headers

    Imports

    Sections

  • Help"/help.chm
    .chm
  • arw.exe
    .exe windows:5 windows x86 arch:x86

    50b2dfeeb3284c9ee9cce1f2fe18f8fe


    Code Sign

    Headers

    Imports

    Sections

  • fmodex.dll
    .dll windows:4 windows x86 arch:x86

    d5007d1d778ae56bbfc71c2a54646734


    Headers

    Imports

    Exports

    Sections

  • htmlayout.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • info.dat
  • lame-enc.dll
    .dll windows:5 windows x86 arch:x86

    a5eefaacaacd0be880edd20a7a17dd10


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections