General

  • Target

    c18a7e336e63de2b98993cdd5576a30d_JaffaCakes118

  • Size

    685KB

  • MD5

    c18a7e336e63de2b98993cdd5576a30d

  • SHA1

    5882aafd35bd1b59afeebcfc873bb9af86b0a903

  • SHA256

    1313daa7bfa2d0bf7659a594845d1b7c1e191d0f642f388c9110e504b79f5f8a

  • SHA512

    377a4bddf2d026b8b09f6f81b22972dcca3ddfc8705dd3303d41e837c49b254d292ba38fc80b4b3740febee6a3896d416756ee2db3d0d02757cfc58b26a576aa

  • SSDEEP

    12288:gat7ZYtF8e75AkRt6ZsgfM2mn/Nm8055iLobaHFb4H3bPYuJ+VmiMRfc8vy4hyY:gG7Z+579Rrqh8C5iUbIJs3MlVmDW869Y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c18a7e336e63de2b98993cdd5576a30d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ngpgrke.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgaigjeb.bejgiagd