General

  • Target

    dbe29e0e5ef4bf53ef0b6f6745de0705_JaffaCakes118

  • Size

    637KB

  • MD5

    dbe29e0e5ef4bf53ef0b6f6745de0705

  • SHA1

    24c1fe392291b2e1f65c392da3d34da5825abf28

  • SHA256

    11bbcf67a4882dc0988beb58f3ea6a5dcef64469fed706ef7df8d1d1a384cc83

  • SHA512

    760d22f5801ec9ed860854ff7e669b1c3b45b01767e5570da6fa05bba565661f620edda3bd9f5e185b425d76c9977da161fab28fdb1716384d3283ee303b7121

  • SSDEEP

    12288:BSYS8K/8hIeI8Pzqn8/9dYd2svmt1FknuFiQOFYLcc6UplYfc8vy4hdW:BSL808+AG6t1F2HYLzd86SW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • dbe29e0e5ef4bf53ef0b6f6745de0705_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dfstmip.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgbfbheb.behbfbg