General

  • Target

    75fed5e90912b254527a85583845ea22_JaffaCakes118

  • Size

    610KB

  • MD5

    75fed5e90912b254527a85583845ea22

  • SHA1

    c0eb49598a8e605f0d10912844be27469710f249

  • SHA256

    17395112e7b84a07a75b97c07d2e9a81315027e21885d27954fecbd556cbc974

  • SHA512

    1ea74c18ef0dabc5696340476585426a0cc2c148641fcb45d868dcbfaf145e045e9d1bc9e59546f687bb044218f4d45a28459f2159bf2a7de5ab37b37a5f050d

  • SSDEEP

    12288:biXZntNhcYxRfv2Q6wJczwqv+ojdllZfxXanv4QgWAu1ihaaE3cWlVj7S:+XZnt7fv2QpabVlXxi4QTAu1i5E7S

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 75fed5e90912b254527a85583845ea22_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/MemoThis/data/adsthis.data
    .js
  • $APPDATA/MemoThis/lang/memo-string.1033
  • $APPDATA/MemoThis/lang/memo-string.1042
  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    153c8a7ee13ff612461f94909c41f6b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll regsvr32 windows:5 windows x86 arch:x86

    b0e679c7c1062c742980c9bc07e2c69d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_0_.exe
    .exe windows:5 windows x86 arch:x86

    cde62e7f485f127cc80c3ffdb9157507


    Headers

    Imports

    Sections

  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    0fe15a74b8c3cffa245ca2eaf12e4d58


    Code Sign

    Headers

    Imports

    Sections

  • memo-client.properties