General

  • Target

    6fe8795d380b916cce294f12fcfa2126_JaffaCakes118

  • Size

    213KB

  • MD5

    6fe8795d380b916cce294f12fcfa2126

  • SHA1

    4e0c3d7c134635581186e3a0ee7cbc6bfe931419

  • SHA256

    959af08d522c81ce874a676d259bedef0c691c7825bf8b5752f71f88f11d7a2e

  • SHA512

    22adb0196d632d7dc457e9f5c315a099c1b32791858e50be375445150e2903560cb76cce5650c15f5002895bded3f397e12aa5069297207b2125b3cb4f1fe37f

  • SSDEEP

    3072:AGW3B+DukJFU4tibS/fQpUP4qk2CVdKG1ghivRTtdNbEeWfmLDbB+AY0KNUqAlpF:AJfkibSHQuwqk20Ii55die8A9+CNUsNf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 6fe8795d380b916cce294f12fcfa2126_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ActivationManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bd10bfd5b5c1b0aa0e7d5a323d19ec5d


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections