General

  • Target

    ae10b33b648e8473831439a6ae0a760b_JaffaCakes118

  • Size

    610KB

  • MD5

    ae10b33b648e8473831439a6ae0a760b

  • SHA1

    382cc94dad4eb1d91d2b50fc93e3d1849357510f

  • SHA256

    980850b18814bdac3d6c6db6bd22c864dcbf3ebec37583b8f5e970b36a208b37

  • SHA512

    b7383a2fbea943a0e6b23df98bcb39ed7a036ff96d0835a1b28ceab4b58a8cd3d1665dd919e6f9075259935d2ae357959c9f32c8ec34f338611180c8355342f9

  • SSDEEP

    12288:fiXZNnEP2defr9mee50X9AiiYMiH3rgHYzOtmwp1bwsVBY25vus79vXpr3T:qXZNnEudp50XpiE3OxmwZXD5vrXx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ae10b33b648e8473831439a6ae0a760b_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/MemoThis/data/adsthis.data
    .js
  • $APPDATA/MemoThis/lang/memo-string.1033
  • $APPDATA/MemoThis/lang/memo-string.1042
  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    153c8a7ee13ff612461f94909c41f6b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll regsvr32 windows:5 windows x86 arch:x86

    b0e679c7c1062c742980c9bc07e2c69d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_0_.exe
    .exe windows:5 windows x86 arch:x86

    cde62e7f485f127cc80c3ffdb9157507


    Headers

    Imports

    Sections

  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    0fe15a74b8c3cffa245ca2eaf12e4d58


    Code Sign

    Headers

    Imports

    Sections

  • memo-client.properties