General

  • Target

    a164eb4b41ac5a169c6d0c96b7f5bdd2_JaffaCakes118

  • Size

    712KB

  • MD5

    a164eb4b41ac5a169c6d0c96b7f5bdd2

  • SHA1

    49fe2b04aadd7fb70b8f2b1f1de07b1ff49071a1

  • SHA256

    b35e69000c97097d1f710510049a4d3ebc8f31db782d4e1eefd79580705bbc47

  • SHA512

    fdc881d41fde922fd68985d1ec697121c43323dae9148b04a4942194c46f293a199edb45f82019e74a9101f51395fb3c768ea04a8cda1124be5fd7b40bd0a5fa

  • SSDEEP

    12288:pCQNAPylrL9iQ4XkNlPPqvlDaxM12JKdLu3iMz1HiMZFeRUI/fCc+sNrrf:pCQNKyqQ+k/PPKNaxM8JxPiNmACcvNrL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • a164eb4b41ac5a169c6d0c96b7f5bdd2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/basicscan.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp