General

  • Target

    d9c4c843a7982ecf0567bc6ae95f2497_JaffaCakes118

  • Size

    685KB

  • MD5

    d9c4c843a7982ecf0567bc6ae95f2497

  • SHA1

    bc3b030ba11a62d3b548491e5d6d1bacf942dda9

  • SHA256

    15ef77d95fcb35282ce960d23060f82a1769312ed5ebfebd5d450d7af52842c0

  • SHA512

    f8d526c392f968bb125e679ab85a41a35b98e044451d5dc8236eb2f168fbb0f6bb8f90dea8f62bfd6f105f6b6f2efa4256d8e63b746984412aefda9c8085b3f0

  • SSDEEP

    12288:NmQSIoCTiGICcXtiv2sLN0GNM1/z6mURdQidJbKXJcV+IeMH857MARrHfc8vy4ho:NmQNoNpNtNsnNAz/wxPbKXGgdsw77C8Q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d9c4c843a7982ecf0567bc6ae95f2497_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nrfqphl.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgagfdeb.bedf