General

  • Target

    c947f45c46681266b544f3b568b88449_JaffaCakes118

  • Size

    4.8MB

  • MD5

    c947f45c46681266b544f3b568b88449

  • SHA1

    e0cdd378a6cd243b397be3f222a5892551353ca0

  • SHA256

    89501d69b20b275ba9a5a835bc04adb894252c0572e28bf946c908da385f0d94

  • SHA512

    0880ed525ded69272d1a7a466ac254f9fd04d07e7f6098ec18ac3ae5b97c2c86a86102162be11466dd413445b233366b12848dba6f02e0d0d43d4c7aa85f198d

  • SSDEEP

    98304:V0e50nr/rlGeG1s+iOj1CLWkpdOh0tCgqPh1Zr1xJ5kJGDHNSe4:V6HlGdwOULBpchnpEJkNG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c947f45c46681266b544f3b568b88449_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    db6e66bff3da6830d0cb7b1044febeeb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Game/CharacterTextures9.zip.jdiff
  • Ӣж.exe.nsis