General

  • Target

    bb22ff267213c3f2b465e6830519a6de_JaffaCakes118

  • Size

    359KB

  • MD5

    bb22ff267213c3f2b465e6830519a6de

  • SHA1

    eab4d9d865bc4465840ed5b33dccba6447805eae

  • SHA256

    d23586553af089bf3b75d015d1bce8d7d21cd07d3e9e590b54ab032e28ba0cd1

  • SHA512

    fe7e8d4e8a2d7b7cd953d2fa02a277c1533255b2016d6f0ed82dddfbaa3fecd1ce06e666b0bdf2c002c74a30d57346a67d6b97ab71129e01fa8cd66f38ab93d7

  • SSDEEP

    6144:DO92yDxBiEDdKL/Ejehxl6zq/YJjdHagXaq1hKz5Hzp4jKwr7SnMUkKUBuw5:a922xvQLMihxl6zWejdHagfOz4KZnMUQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb22ff267213c3f2b465e6830519a6de_JaffaCakes118
    .zip
  • ComboFix.txt
  • QooBox/CFScript_used_2012-03-27_19.45.43.txt
  • QooBox/ComboFix2.txt
  • QooBox/ComboFix3.txt
  • QooBox/Quarantine/Registry_backups/Service_36883902.reg.dat
  • QooBox/Quarantine/catchme.log
  • Qoobox/Quarantine/catchme.txt
  • program files (x86)/Mozilla Firefox/gkmedias.dll
    .dll windows:4 windows x86 arch:x86

    7e37c13b8c65aadc27b940cebc3a3fac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • program files (x86)/Mozilla Firefox/mozglue.dll
    .dll windows:4 windows x86 arch:x86

    6450adeb0e35a351ab07a82a56daa45d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • programdata/Microsoft/Windows/DRM/A3A0.tmp
    .exe windows:5 windows x64 arch:x64

    4e36dfb05de6f369354046dbd1fd6358


    Headers

    Imports

    Sections

  • set