General

  • Target

    8e801b1c88418c08afcb70c3db19f3d5_JaffaCakes118

  • Size

    1.7MB

  • MD5

    8e801b1c88418c08afcb70c3db19f3d5

  • SHA1

    7f19d6e4f7b3dc32c525127141f6bd2c38b24a72

  • SHA256

    3fc4b17b2d78051db6859dbef82d0b463946ba57697526af0c7e99be5c3fd06a

  • SHA512

    218558aad2c6c3357b31910526d94338b533d9d71a03aa7caf13822500e00febaca2c5559e42bc76bb504099a7de294c1a0259d960ad4daa978186dc630dbaf4

  • SSDEEP

    49152:5TRHb5BMAYK75/NY4fqhVYD8/d0Hb5BMAYK75/NH:597gclFYPVYD8F07gclFH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e801b1c88418c08afcb70c3db19f3d5_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    113bfc7886d2a6fb29af8c5aceec28e5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    f7f99bdd3b6ce4a87df0ce0eebcde6c0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • rez2/RF018.REZ.jdiff
  • rez2/RF019.REZ.jdiff
  • rez2/RF192.REZ.jdiff
  • 穿越火线卸载.exe.nsis