General

  • Target

    adad1b3da961aaf496fd3f0869a3262c_JaffaCakes118

  • Size

    987KB

  • MD5

    adad1b3da961aaf496fd3f0869a3262c

  • SHA1

    b36f9404706b924ca67ee59fd3174da41d6d2d94

  • SHA256

    fc6b56d8d2c7f9a4e4b33de85c344506bd744d0e64da700b5607436fb7e6f728

  • SHA512

    ae64eee88b0bc37d1c8e5b1483b92ee76992d7d3f40fcccf6cb2e9428ab65b966147d9e6f3362ef36eeaa7472df7215d5eb9d211547f35b20f693b5b4ba0b92e

  • SSDEEP

    24576:CXZkte+oX5OpgiUdjDZOVG5W5Gkby2ZAm4Xgp:CBppiURDZh5W5G/2Zh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • adad1b3da961aaf496fd3f0869a3262c_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $APPDATA/MemoThis/data/adsthis.data
    .js
  • $APPDATA/MemoThis/lang/memo-string.1033
  • $APPDATA/MemoThis/lang/memo-string.1042
  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    153c8a7ee13ff612461f94909c41f6b7


    Headers

    Imports

    Exports

    Sections

  • CUPSetup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    0fe15a74b8c3cffa245ca2eaf12e4d58


    Code Sign

    Headers

    Imports

    Sections

  • memo-client.properties