General

  • Target

    a1f5df696ddfb4ccb60122682236414b_JaffaCakes118

  • Size

    805KB

  • MD5

    a1f5df696ddfb4ccb60122682236414b

  • SHA1

    6df87b2532983583cc2aa4d42e8594e991aed86d

  • SHA256

    d8a5e944bcf9b859d865ae024e48594c41812557f89f93f448850a9c29affbbf

  • SHA512

    3b94f82589cad47539cbd2e3ec94c3966b4fe9226793715ae4fdc6dc67cb236d06740c8d083863554702d96e7326e0929a115594cdf8ba2b7a89844addf156d7

  • SSDEEP

    24576:/hRVBng0jn74OFOvjAG/+XcOwqBwVPETjE79smzw:/hRV20D7BOAG/4TARETjE72v

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a1f5df696ddfb4ccb60122682236414b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • awrdpr.chm
    .chm
  • awrdpr.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • languages_ru.dat
  • uninst.exe.nsis