General

  • Target

    ebdeb837d5717ee7ecfcda3cbfe1b61d_JaffaCakes118

  • Size

    330KB

  • MD5

    ebdeb837d5717ee7ecfcda3cbfe1b61d

  • SHA1

    45f96742151c7a568b0797538da2bdaa37f95fa8

  • SHA256

    de5ee69333bae4a7315958c530e4f4d747c84f15586f9e5f3775e694d7de18ef

  • SHA512

    59dba3357a92124a2b999f23b503c288cb919b6cc285799b074f84d50e04a54a0ad039cac3d6cceb3ee5f88d09604c225c31849a37b2d6da78082f46cca308b8

  • SSDEEP

    6144:Fe346uMB2tAApVf3UBpcCLaWo0UUuWzA3MWYT+vy4hEUSs:2uMEt9V/KVL0fc8vy4hLSs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ebdeb837d5717ee7ecfcda3cbfe1b61d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExecCmd.dll
    .dll windows:4 windows x86 arch:x86

    bf44c9fb48bb8c36b3e2527e7252350d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $TEMP/AskInstallChecker-1.5.0.0.exe
    .exe windows:5 windows x86 arch:x86

    66c8920bc3035d736f66f927d463ca2b


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe.nsis