General

  • Target

    6f9c0b84685737937012b9880dc1e3c9_JaffaCakes118

  • Size

    142KB

  • MD5

    6f9c0b84685737937012b9880dc1e3c9

  • SHA1

    08215e365243483af35f4d5ab169bb91a77f5fd8

  • SHA256

    c70f4dffae98fad9be65d2bdc05f4a62c3e40c1cdf85ff868328fdd96751ca2e

  • SHA512

    7913f1b5904409a2d0eaf4b610bd3d346f4c6ebea188f5fcdbdc0f4d5dbb4121ba4d99151684c4adc86205d7ad664fc49e77fa7b063ddd1063b144c575a37420

  • SSDEEP

    3072:qnOn7t7XpdpCCTg/sxFgJ6eqgKJ+BCSCWruRwuDmcuStP7q2bIAnkCI:qKpdcCrTdgKfyuCEmEbdfI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 6f9c0b84685737937012b9880dc1e3c9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    62dbaf939091253e23f58cbf28247157


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections