General

  • Target

    db489f346760becd787224aa6cecc20d_JaffaCakes118

  • Size

    142KB

  • MD5

    db489f346760becd787224aa6cecc20d

  • SHA1

    3dcdf2835539a43fc38fd8d6976861f094b26b12

  • SHA256

    6ecb554c1466c708cef60f016e3c2116d9ba10d7d66c66d3f99d62823221c630

  • SHA512

    681b0e43d2ab7ac50fdb4584bccf06a6ee3dbd69b22a3cac4f0345ee1e4d6b50d5a17212d04a9f3f717bb3ede64e8425a9a565e26fb40cccef8e2e6caea01901

  • SSDEEP

    3072:ynOn7t7XpdpCCTg/sxFgJKeqgKJ+BC1CRZWUhvkeP2nNVcSK:yKpdcCrTdgK05k22nvcSK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • db489f346760becd787224aa6cecc20d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    62dbaf939091253e23f58cbf28247157


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections