General

  • Target

    b0b16615eb176bedf59630e5ea182153_JaffaCakes118

  • Size

    610KB

  • MD5

    b0b16615eb176bedf59630e5ea182153

  • SHA1

    c329ec7ad96c8ff07bb1416abf3be83f846788f0

  • SHA256

    65f61842f6c4f7934b733c60fd30658bd2e5eedd100f63a342e65ed02abe4df4

  • SHA512

    5269a0f0903fb0f0b1cf1d6b7e9faf211369d9d15006a355005144d5147c80873693b65506648f965396384afa3fcb7276183d3cd060d115d4e36b6a0394d440

  • SSDEEP

    12288:MiXZcIB5q5z1FfWd31meK2MydCH7uC3Epu3c7HBEfEe:dXZcILq5OlNKksbuC0pu3c7HBEMe

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • b0b16615eb176bedf59630e5ea182153_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/MemoThis/data/adsthis.data
    .js
  • $APPDATA/MemoThis/lang/memo-string.1033
  • $APPDATA/MemoThis/lang/memo-string.1042
  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    153c8a7ee13ff612461f94909c41f6b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll regsvr32 windows:5 windows x86 arch:x86

    b0e679c7c1062c742980c9bc07e2c69d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_0_.exe
    .exe windows:5 windows x86 arch:x86

    cde62e7f485f127cc80c3ffdb9157507


    Headers

    Imports

    Sections

  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    0fe15a74b8c3cffa245ca2eaf12e4d58


    Code Sign

    Headers

    Imports

    Sections

  • memo-client.properties