General

  • Target

    fa307099a48b83af432c365f555503e6_JaffaCakes118

  • Size

    589KB

  • MD5

    fa307099a48b83af432c365f555503e6

  • SHA1

    be368422d42b14a54493da962c61d8e76161268d

  • SHA256

    10ed9a0b74ae796f3e2c9b7644a17b72733a4e40884bb61bfb92073fa8d82c09

  • SHA512

    a0ad8189921f4fc16762f810a10b7d2deda81d44179c73ea9b919e643df677a29cbff9f6454d0b088261bcdc37880ecf35abcb584717b2c6142400584379ed31

  • SSDEEP

    12288:1Hi/6FSglZK8Jd42gCfZO5o1V62Jlq9nEVDl8PF6tuBtI:1Hish3ZJdfZO5o1V62JlcEVDlOwuc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fa307099a48b83af432c365f555503e6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ob01.dll
    .dll windows:5 windows x86 arch:x86

    aedf5537f68b98ceed944aab166ef3d0


    Headers

    Imports

    Exports

    Sections

  • insHv65.bdbcabfiabhb