General

  • Target

    db24fef7e7e66fea7b2f97c5e3fea745_JaffaCakes118

  • Size

    1.0MB

  • MD5

    db24fef7e7e66fea7b2f97c5e3fea745

  • SHA1

    77d741ebd6951c921a17331e51b4d2610e2a441c

  • SHA256

    4bfbc0debf83bcb8331d7972a1ab27c07d93971658e5559521bfe541bc6850a1

  • SHA512

    62416b032236af0439e26d5094c655b6277f8212ba160a03fd4cf0fd306f52f1f9d1f8f27120fddc701acc09dcef3bb006bb2bcf132f3505ff55e4762a6a25f4

  • SSDEEP

    24576:hMrge5uxhwMxu4ouQj3lvsbbejP+PxyXZHHBDGyt:2se5Mg4ounwP9ZnBDGyt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • db24fef7e7e66fea7b2f97c5e3fea745_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • Kumei.exe
    .exe windows:5 windows x86 arch:x86

    730beff2dcdea37bc2cc597394114d08


    Code Sign

    Headers

    Imports

    Sections

  • Lunar.dll
    .dll windows:5 windows x86 arch:x86

    1e8676d6112566fdb38374322b20a799


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis