General

  • Target

    6fb3049cb0e442d672d50c04d65821d1_JaffaCakes118

  • Size

    8.2MB

  • MD5

    6fb3049cb0e442d672d50c04d65821d1

  • SHA1

    c9c55ab3dcfa1c58055e5af4623baec0f401ddd8

  • SHA256

    19959f83d233f431285c3f8d23d289229eaebd05463064772da91861949f2ad2

  • SHA512

    88f41de74553ddd197cfeeb238c2919408d9c1c15804bf06bb52c9edec61dbd068b916ea412e93ee2d0bc9aba912025e4ac5a694f2495e1785f5ecb7ec8ec9b8

  • SSDEEP

    196608:jyD+lOkwV5RPOuzSUNZIQ8CtkqtcOsUy2pH5ED2ulPacd:Y+lEtmuzSkV8ckgY2pHe5BZd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 6fb3049cb0e442d672d50c04d65821d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • "Mahjong.exe"
    .exe windows:4 windows x86 arch:x86

    ce41c68cbe8d4e368e1f46cfcce2b07f


    Headers

    Imports

    Exports

    Sections

  • "aminstall.dll"
    .dll windows:4 windows x86 arch:x86

    39bf2f9400b25dffe6038f4810921a11


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    445ca064c668ebcb89957d525a8bef23


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • config.txt
  • icon.ico
  • resources.dat