General

  • Target

    a2bcd004f2f40effd77c9126a3f70272_JaffaCakes118

  • Size

    2.9MB

  • MD5

    a2bcd004f2f40effd77c9126a3f70272

  • SHA1

    2f7c8c698b9762d3f7100630fbece07bc1728bbf

  • SHA256

    5a50d0441f9e1981c0960551fd5fd4e7bb333b5f38ec56ea5aa2597413828085

  • SHA512

    6f3e90fe2ad9cd4d177d3f1ba74cb9edeebed9791c35fc203a590b4bbff018afb2db3347a709ca1b7f6acbe4d7b62e16375281b46fee73bee2cfddab5b5b95bf

  • SSDEEP

    49152:nE+XvV1MsTnXfopNonWBfqq2dvxnrApB61qf6+YNmWCNV0vFwO0IRoVQ:nE+9TXCNoEqq2dBAHWNjwO0coVQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a2bcd004f2f40effd77c9126a3f70272_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Lang/English.ini
  • Spy-Quake2.exe
    .exe windows:4 windows x86 arch:x86

    c6eb411f28df655f09219f51534351da


    Headers

    Imports

    Sections

  • blacklist.txt
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • ref.dat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections