General

  • Target

    8c94db987a495af7cc44b2ab62833e8d_JaffaCakes118

  • Size

    1.1MB

  • MD5

    8c94db987a495af7cc44b2ab62833e8d

  • SHA1

    69241994fa2352efe7c7162da904470b9630c4c8

  • SHA256

    1bce98e9673f7927041295a256b41d6925d78f6f8c3efef5e7b8c9ed06adf1a2

  • SHA512

    444ea0b3f2c43011af29327e1c9107b8c844515e7f0d958a6cdf3e9539ee3c7e344cefdc131813b50b703a10c6f3e053685974aa58a1c2fe1d561ecc93e8eb98

  • SSDEEP

    24576:/81RPrTQ3jMw27a1i8/fzt3T2dxiTwpPg42dWaNioa8T+2gl:krekaT/pVTwF4QaX7+2W

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 8c94db987a495af7cc44b2ab62833e8d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/QvodInit.exe
    .exe windows:4 windows x86 arch:x86

    b15aa047ced3a842c3d63e77ae9cde2d


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/qvod1.ini
  • $SYSDIR/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • NetAgent.dll
    .dll windows:4 windows x86 arch:x86

    f618d4cb4d41a461355f2eab6ae077ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodBand.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0e32a3b828b41920c248142fcbc590d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QvodInit.exe
    .exe windows:4 windows x86 arch:x86

    b15aa047ced3a842c3d63e77ae9cde2d


    Code Sign

    Headers

    Imports

    Sections

  • QvodInsert.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    512da446183fb702675cbe4761220c96


    Headers

    Imports

    Exports

    Sections

  • QvodPlayer.exe
    .exe windows:4 windows x86 arch:x86

    1804f662d6972fd3d24222e8aab5fa2e


    Code Sign

    Headers

    Imports

    Sections