General

  • Target

    d23d528d6b79da786fba87ddb3d5eed3_JaffaCakes118

  • Size

    1.9MB

  • MD5

    d23d528d6b79da786fba87ddb3d5eed3

  • SHA1

    955d8c093d417183f547aac1422d49cd86e99c5e

  • SHA256

    ffc9102bb49ca8784e95ca5249eb0357ef976d01f3f7405077d0c1fcb2c8a3b9

  • SHA512

    e09a4cc32b73314ca65ae948ca364b281bae6d464000bf8c1a4d248a2d79bd9ca310f935f1c5eb3c4cbafa3185b9788b63f7feb5511e9ebc60a2cf45d008fd90

  • SSDEEP

    49152:8aqlrjkj/9oNyFY6nz2GTx84SIZsvELgOTR1ZLBsb:Ilrjki4lnzxTxbSLEL3Rtsb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d23d528d6b79da786fba87ddb3d5eed3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/WibgaLoxmafh/$APPDATA/WibgaLoxmafh/Joeoxl.din
  • $APPDATA/WibgaLoxmafh/$APPDATA/WibgaLoxmafh/Wovza.exe
    .exe windows:5 windows x86 arch:x86

    2572e1f56c6c7cfe64ff1d2597b57d86


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    6aa1fb50f909cdf4bea3d3523348e900


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/EdobkoKorab.dat
  • $TEMPfolder/NipshAchg/JordAlijefe.exe
    .exe windows:5 windows x86 arch:x86

    26e5306ba5a7408dd46773ea695d4257


    Code Sign

    Headers

    Imports

    Sections

  • $TEMPfolder/NipshAchg/freebl3.dll
    .dll windows:5 windows x86 arch:x86

    f873bae979000fa955d161b528461da5


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/libnspr4.dll
    .dll windows:5 windows x86 arch:x86

    c3ea252fa1435d3841a3253d37e94812


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/libplc4.dll
    .dll windows:5 windows x86 arch:x86

    3891d3dc70cf5d7d26826daf36b8c086


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/libplds4.dll
    .dll windows:5 windows x86 arch:x86

    94ac7479544062cc3d4fec633c5ef59a


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/nss3.dll
    .dll windows:5 windows x86 arch:x86

    056c3dc8dc9919b781028066c7f9d51c


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/nssckbi.dll
    .dll windows:5 windows x86 arch:x86

    5e62360c3269a77afaa830fdada7767b


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/nssdbm3.dll
    .dll windows:5 windows x86 arch:x86

    a5e363ad4a9f58bb0976e299ef467471


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/nssutil3.dll
    .dll windows:5 windows x86 arch:x86

    b3ea12d3f9eed13644f0fc4a733cdc54


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/smime3.dll
    .dll windows:5 windows x86 arch:x86

    e9f12bd41b659b69cfb5facb9a09bb01


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/softokn3.dll
    .dll .ps1 windows:5 windows x86 arch:x86 polyglot

    44653ae2122bfb7a591e41b1eccba9c8


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    6f383944ad37c3b1c6ab47bdb43092ea


    Headers

    Imports

    Exports

    Sections

  • $TEMPfolder/NipshAchg/ssl3.dll
    .dll windows:5 windows x86 arch:x86

    669657e3b303bd7906e02a3d3b84c380


    Headers

    Imports

    Exports

    Sections