General

  • Target

    f6b6378f43f30a8c44e12702501f4a1b_JaffaCakes118

  • Size

    581KB

  • MD5

    f6b6378f43f30a8c44e12702501f4a1b

  • SHA1

    b6465282b32a49e2fea40161754df2f556785229

  • SHA256

    24c573c5095fc53e5917d7fc4179b4e8a8efa43bdf3c78a83c36106f62024e34

  • SHA512

    75fb6b2046a8d4f9087217b5498a0659b10d91286ca0cce38855f67e72f315df4a4ad2b6e2193668e210c066752c34267af7b856d5f8282aa49e5d84b045b9c8

  • SSDEEP

    12288:BxDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+K:BpJbl+36tKPdhJ7V

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f6b6378f43f30a8c44e12702501f4a1b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/cgibuti.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • 1431831751.fbhcabfbfbef