General

  • Target
    b9b07066e266e04d377f96b55967a1f6_JaffaCakes118
  • Size 333KB
  • Sample240823-ayvk5aydmp
  • SHA256 abfda8ae99688153ce446924a7fa3b0c777ba866ed867547ed1b9c59d9df131b
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • b9b07066e266e04d377f96b55967a1f6_JaffaCakes118
    .exe 333KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/NSISdl.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/logo_small.bmp
    8KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/pic1.bmp
    14KB
  • $PLUGINSDIR/tbpacks.bmp
    13KB
  • $PLUGINSDIR/toolbar.bmp
    14KB
  • GinoPlayer.exe
    .exe 222KB
  • Interop.WMPLib.dll
    .dll 284KB
  • Uninstall.exe.nsis
    20KB
  • launcher.exe
    .exe 28KB
  • uninstall.ico
    1KB

b9b07066e266e04d377f96b55967a1f6_JaffaCakes118

  • IMPHASH 7fa974366048f9c551ef45714595665e
  • SHA256 abfda8ae99688153ce446924a7fa3b0c777ba866ed867547ed1b9c59d9df131b
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
38:6f:d2:f2:e4:fa:a1:4f:32:27:ed:cf:5e:5b:4c:24:47:29:eb:71
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=JDX Tech\, LLC,O=JDX Tech\, LLC,L=Westland,ST=Michigan,C=US
Chains

Aug 22, 2024

Minor OS version
0
Major OS version
4
Entry point
12538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths