General

  • Target

    758621a9b4b841b52ff5329e966ee9ca_JaffaCakes118

  • Size

    701KB

  • MD5

    758621a9b4b841b52ff5329e966ee9ca

  • SHA1

    d66913bc6c3247950c06d0bb5d59d6f410e31934

  • SHA256

    d060e27addd20e2084ced1e1c2dedfc22b579cdc7fe1cef3f53b13602b8b086c

  • SHA512

    fd025e014b64559597224f54d73c8f4fa9559ade421c34397398ca99568ce4c7531e82af3272dc3d77dff631d1fbaed8107a79ceab2c83e1d86e5e145729e4d2

  • SSDEEP

    12288:MCy5t+ZY6lK/2zYnRIeXp7Xk779WOnzcyAkvmttN4clxyR1o3mY5Crt4zgcAYj:CtCi2zYnG60779WOi6mtn2fS+48cAYj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 758621a9b4b841b52ff5329e966ee9ca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Program/LinkSimulate.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d610efff26feeb97f00e3f202df7a666


    Headers

    Imports

    Exports

    Sections

  • Program/XLUser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    81be6b054b946655579947dad91af49b


    Code Sign

    Headers

    Imports

    Exports

    Sections