General

  • Target

    bce933eaf18869f13037dcc512c1dd79_JaffaCakes118

  • Size

    1.8MB

  • MD5

    bce933eaf18869f13037dcc512c1dd79

  • SHA1

    f4f91b09dad8b29bb90b66d14757c19dc70ad043

  • SHA256

    ecf925ee4cf1dc0a67a4725768abf25b80f85c0705f82f77015e6fbd46e08447

  • SHA512

    611615f221da1b3adc95820d558a759a01ed7ba0484112d845256b97bc2a5ae04d0eb2465952d6fb5d5a393157edc1df169d594545492145f6148bdf85da7496

  • SSDEEP

    49152:vsuC0qdZOnymF0eoGzlAWRj0Ek4UT//AXBMZZ:v7qdZqymFNzzlAWKEk4e/YyP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • bce933eaf18869f13037dcc512c1dd79_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7334ff89ce2f0cd0e72ca821f94d0d59


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ext.dll
    .dll windows:4 windows x86 arch:x86

    1c2d42a4e533f3c86f1f4597355c880c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/lastpage.ini
  • $PLUGINSDIR/update.ini
  • $TEMP/pin.vbs
    .vbs
  • $_7_.exe
    .exe .ps1 windows:4 windows x86 arch:x86 polyglot

    71b4016a7468fbe02d8cca196c01425c


    Headers

    Imports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • MFC71ENU.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • database.dat
    .zip
  • license.txt
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    5267e141ef53b6bc9facced1f8907002


    Headers

    Imports

    Sections