General

  • Target

    96b7e8eebf7df53d3e5cb4aa6183a715_JaffaCakes118

  • Size

    646KB

  • MD5

    96b7e8eebf7df53d3e5cb4aa6183a715

  • SHA1

    b2e83b09e3554e722063450bf7d7b7b3a3d702da

  • SHA256

    cf9728d9923fef49bfe7cbf2e6d850c83f4278562b59f92473aef48d86cd2b3a

  • SHA512

    463d651ab4ad6b5c4dfb6c4fc8f16b27d51b4169465ccad745c35f0e55c5041023700e0c237aa53513ea9e935a1e42f7cc27e13b2073c14526ac384986c56f99

  • SSDEEP

    12288:rTY8Bg9TtE2alwjQAy0Q7NI3B1SrdFPFwscyagOWxZb3n0i8Z5At0CE:nYWkTZHQ7kB1SrHoyagOojn0bANE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 96b7e8eebf7df53d3e5cb4aa6183a715_JaffaCakes118
    .cab
  • upgrade.exe
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Code Sign

    Headers

    Imports

    Sections

  • $0/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $0/zwunzi.dll
    .dll windows:4 windows x86 arch:x86

    a717a42bc36c9cdd96755e9d4a5ea633


    Headers

    Imports

    Exports

    Sections

  • $0/zwunzi.exe
    .exe windows:4 windows x86 arch:x86

    ae22cae180a0fe6ea024ffa60842ec65


    Code Sign

    Headers

    Imports

    Sections