General

  • Target

    dc8a96d5502973e1e32cf308132f52d6_JaffaCakes118

  • Size

    120KB

  • MD5

    dc8a96d5502973e1e32cf308132f52d6

  • SHA1

    e7a70e3bc2cbcb71d07a8911b2c081842fcc3bbb

  • SHA256

    c9d9a4d226219e88884a444716ae2541dac8b6f9bb728424fc67bbf77b028818

  • SHA512

    f66640b339221d87a5d76d77902a8f7d28c0858206c77b43b542344d4c57e0435ad7d7112051687b0605b69d89879285c0f4e188020d0c62ad1705099dfc8344

  • SSDEEP

    3072:vQIURTXJ5eqgKJ+BCrCCqKS5DWM1IxvWKOE:vs9gKCCqJIx+Kl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • dc8a96d5502973e1e32cf308132f52d6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections