General

  • Target

    8f0e523e2b297a72d3873a0530a20724_JaffaCakes118

  • Size

    2.7MB

  • MD5

    8f0e523e2b297a72d3873a0530a20724

  • SHA1

    6cb7614032892b7c14274603c8855883c8d69e49

  • SHA256

    6ad1835f4a03f110b2094ede277a362ccb36bef8613bffb0a07380e3a666f18c

  • SHA512

    3c26af3e07822ca694b973f481433365b4ccc238e80a332864998c7840aff0e4f1ae15a93d1e38ac0b37fed79104437968e1b8bdcc1c8cc260c73875b5f2309a

  • SSDEEP

    49152:G54CeMBvAryNfY/CflVu7LvV+RMXCkJU50hewj7v13P35HhwPKx:G54CeMBvAyNfY/KlU7TNJp5j9JHSix

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 8f0e523e2b297a72d3873a0530a20724_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/Immunos/help.rtf
    .rtf
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleFC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    54317f9e35e039c28fdb421cf518703e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CustomControls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Immunos.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • engine/clambc.exe
    .exe windows:5 windows x86 arch:x86

    1ccdce5c6aa91de56b6e2b7278afce9a


    Headers

    Imports

    Sections

  • engine/clamconf.exe
    .exe windows:5 windows x86 arch:x86

    aad1c0b407b981e52c9509b3a78a118b


    Headers

    Imports

    Sections

  • engine/clamd.conf
  • engine/clamd.exe
    .exe windows:5 windows x86 arch:x86

    b698c6f120970c840a4b923cf6fbf846


    Headers

    Imports

    Sections

  • engine/clamdscan.exe
    .exe windows:5 windows x86 arch:x86

    83efba947d1711f9a8f691b7b484aa76


    Headers

    Imports

    Sections

  • engine/clamscan.exe
    .exe windows:5 windows x86 arch:x86

    fb7059126670cab3f449c07bb61aa87a


    Headers

    Imports

    Sections

  • engine/freshclam.conf
  • engine/freshclam.exe
    .exe windows:5 windows x86 arch:x86

    e58c3c5e0fa46e428337c9e1d666c97a


    Headers

    Imports

    Sections

  • engine/libclamav.dll
    .dll windows:5 windows x86 arch:x86

    86d063f991314870e10089394539d20c


    Headers

    Imports

    Exports

    Sections

  • engine/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • engine/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • engine/sigtool.exe
    .exe windows:5 windows x86 arch:x86

    51159777edc95d11302924da358fcdcf


    Headers

    Imports

    Sections

  • uninstall.exe.nsis