General

  • Target

    9fd6173d31bbfa7965c4a8fc09dc2b17_JaffaCakes118

  • Size

    646KB

  • MD5

    9fd6173d31bbfa7965c4a8fc09dc2b17

  • SHA1

    9068eceb4b69c39eb265dfec429f06719f554a82

  • SHA256

    da0e41d416669558afdd0fb93b2e0949ca15a8cf887202ed1fe2bb879fd737fa

  • SHA512

    6f0f47323b4faf202b7cc9aeec795203ca903f4170e5daa04bc0c457d6a63f603fd2bc919f4f5302d604d480fbce773b6a1b9dda73cf4153d26809e376b6b4c1

  • SSDEEP

    12288:c6B/LUjD1H4oL4DiBe30UtXJ5lnqpr4zGrWbHO55tsnJIqw:FBjUj5H4oMD30AXJTnygGrWbQidw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9fd6173d31bbfa7965c4a8fc09dc2b17_JaffaCakes118
    .cab
  • upgrade.exe
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Code Sign

    Headers

    Imports

    Sections

  • $0/barquery.dll
    .dll windows:4 windows x86 arch:x86

    76d64dd9d9b707c74ca59292a90a0a8a


    Headers

    Imports

    Exports

    Sections

  • $0/barquery.exe
    .exe windows:4 windows x86 arch:x86

    09e5961875911fdc58b961dffc1f4da3


    Code Sign

    Headers

    Imports

    Sections

  • $0/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp