General

  • Target

    ef31c9b9dcec9479232f3f9c3af62308_JaffaCakes118

  • Size

    120KB

  • MD5

    ef31c9b9dcec9479232f3f9c3af62308

  • SHA1

    c12eb8fd0b3b97c645a590cbfd725bf9f9343da7

  • SHA256

    3d51d66c2cba8a2d784137b4bf03a41d5803cb7fbb96636818fbb1a6ff0258f0

  • SHA512

    ec974195ec4ca1a0b0af6b77ca32e74a2140e30ec64f9b0cb65d937e7851a4059947ae8b42917722cd97580c2b08cb93d1c6e3985fc00f253eb5e859b5e880f5

  • SSDEEP

    3072:PQIURTXJceqgKJ+BCiCBt0NdLZi63oUj/YGKeM1mjtzh57t:PsugKXBtE1i69jbMytj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ef31c9b9dcec9479232f3f9c3af62308_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections