General

  • Target

    a1f148bdf448c4654b14a90d6f6bcfde_JaffaCakes118

  • Size

    1.3MB

  • MD5

    a1f148bdf448c4654b14a90d6f6bcfde

  • SHA1

    63de0ee3cc57865147332aa78554dfbf1ea66222

  • SHA256

    ae6539ff830c6541c1452e5f2620dc2165af87408d3c3e0fc9a921a2d3a66f86

  • SHA512

    4de48df959b876561edfc6dadcfb15c29c49cffd800aa3b217e7d3c7eff3c9a024b26423c9fef7ae6c4b7666c2733d70e3eb1d30ab91c24759cad2d2265bd1dc

  • SSDEEP

    24576:75Rn1QmmhIHNlk3zBzYxCoxkd3VaLdFp7E1/nup+h/mPS8HmnHSytPODSz0kkLSs:NRnOmmhITk3u4FdlwFa1/up+ho3mnHSp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • a1f148bdf448c4654b14a90d6f6bcfde_JaffaCakes118
    .rar
  • NewsReactor.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    ed83f419402bc3b83a08e3aaf8b5b5b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • NewsReactor.chm
    .chm
  • NewsReactor.exe
    .exe windows:5 windows x86 arch:x86

    314fa845b18aa2ec75507c49a36bd022


    Headers

    Imports

    Sections

  • ReadMe.txt
  • dbghelp.dll
    .dll windows:5 windows x86 arch:x86

    42cfa6142c38112bdaffa05fb22db82e


    Headers

    Imports

    Exports

    Sections

  • tips.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 新云软件.url
    .url