General

  • Target

    f6c086d88c778b689af75d986917ad80_JaffaCakes118

  • Size

    148KB

  • MD5

    f6c086d88c778b689af75d986917ad80

  • SHA1

    394c222b7fedb0713548948508c5e7743e97cc55

  • SHA256

    5489c20cfb45e05cfcadf3ab5c8dba296d8e58f10994eae07535e5c1d4b43c2e

  • SHA512

    5323afab533df52604a870ccbd674fc20c22aa235d196099cf03d8255a3ba2c6cf9104a9fec71cd0229cca085a4d0b29a2832044f6cb43fb7414c3fb66ec20e1

  • SSDEEP

    3072:yLk395hYXJbjdn/1tMEd4UCkwKKnTwNnDWXmE10C1g2o4f:yQqJd/1tM25FDKT62yk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • f6c086d88c778b689af75d986917ad80_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_5_/plugin/bibibei/bibibei.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    61d1330ac1ac93686cbdbb264aefad41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_5_/plugin/bibibei/bibibei.txt
  • $_5_/plugin/bibibei/plugin.ini
  • bibibei.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    61d1330ac1ac93686cbdbb264aefad41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bibibei.ico
  • ж.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • ȱ¹ٷվ.url