General

  • Target

    8cf607fdab6a3f3a93846b0078d1ca26_JaffaCakes118

  • Size

    1.2MB

  • MD5

    8cf607fdab6a3f3a93846b0078d1ca26

  • SHA1

    635efdd6e6159106a1af9d21eb48da7789bc61f6

  • SHA256

    d49fee3086d532e212e736a3e0d74b30d5339e348c07268115533fb2cc1db88a

  • SHA512

    1130219839594b53ff25f509aaa9c92fa06b3384f52c899ac25d94b686daee5af4770d6a20958e5e024970a978bb124eb38596de4549146cfb1dc51fbd9e8724

  • SSDEEP

    24576:RDfbJ39gmENlUwJOBJf+VnXYBVVGWYeLe3B02DtEl/IjdpKUlvahxQ:1bJ399EjloBVYeL8CK8QjWUliLQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 8cf607fdab6a3f3a93846b0078d1ca26_JaffaCakes118
    .rar
  • futuriximager.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • fxfreg.exe
    .exe windows:5 windows x86 arch:x86

    b0305e0f3d7bf15f7c346e93aab64d20


    Headers

    Imports

    Sections

  • fximager.exe
    .exe windows:5 windows x86 arch:x86

    c25613c8da377a18e3a2432554b7b631


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url