General

  • Target

    e9f34be4b49132d5dcc36296b849d324_JaffaCakes118

  • Size

    410KB

  • MD5

    e9f34be4b49132d5dcc36296b849d324

  • SHA1

    103b306d17bcd20933555327bd3cb91558ea5b7b

  • SHA256

    6b2a38586659b084a921af8536f476e85ff52f8081e77b6f3f569c71cd3da624

  • SHA512

    0186481973c8db134af9ace93296f39c0c18604bf6126cfa6bfd1be9255d95f3b41122189deb3021e4819f0f662dde202b3e01168e91c158306f19ab508f2141

  • SSDEEP

    6144:UeN+rsqd3wLovf7N7klKG6OWbUgdATsVrxVbUVrr1Mv3uvG4dIM2dU2wNrCst9Iu:p+rsqXn7N7kH/YxVS03uuuIM29AWC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • e9f34be4b49132d5dcc36296b849d324_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbasic.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp