General

  • Target

    b04d9982015509d173eee5aa2f59e332_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b04d9982015509d173eee5aa2f59e332

  • SHA1

    f4be1f879937b1638ab54bcd2dc584ef1a6a3f1e

  • SHA256

    1348267763e54100b28429d20d696d0c57466558c7adb61642c2f72d4871053b

  • SHA512

    174ebd4fe25569780eb36ba57d5dcb73bad82e77f21eea745321ea721881a310a8953578ca3a35412e19857b3fabb7e5f73d401cd8866920c30bbe0c866dc243

  • SSDEEP

    49152:aShSYOuJN/pp8wiQCxrSEu7G3scuP5Kw0Fr4Y1F9pAC3T+lz2YIVoyAX01zD6P:aSgDupyOCxrSEu7G3sX04Y1F9pAjlruk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b04d9982015509d173eee5aa2f59e332_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/MemoThis/data/adsthis.data
    .js
  • $APPDATA/MemoThis/lang/memo-string.1033
  • $APPDATA/MemoThis/lang/memo-string.1042
  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    153c8a7ee13ff612461f94909c41f6b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll regsvr32 windows:5 windows x86 arch:x86

    b0e679c7c1062c742980c9bc07e2c69d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_0_.exe
    .exe windows:5 windows x86 arch:x86

    cde62e7f485f127cc80c3ffdb9157507


    Headers

    Imports

    Sections

  • CUPSetup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    0fe15a74b8c3cffa245ca2eaf12e4d58


    Code Sign

    Headers

    Imports

    Sections

  • memo-client.properties