General

  • Target

    fa483ca2418dfac2017bf0c870041208_JaffaCakes118

  • Size

    649KB

  • MD5

    fa483ca2418dfac2017bf0c870041208

  • SHA1

    27c6cca9318e3993645bd4d7dce6143c50c118d3

  • SHA256

    22db31812ddadc34669b88ba0a88e517aeb401788321115ebd7f2bdd43088a65

  • SHA512

    5037deb3d047a885f632427f67a9d4b5bd970364a919396c77126f7d1f38f6ab66ab135359ea27d41bedf6943d33fe9b04bbf917da84d7f57e7758f96d8e9102

  • SSDEEP

    12288:jY16KXJgDC7PgzzDeRAbjJRpK8qFLbsNW5kUWPcOAZ9zX89fc8vy4hG:jYQNQWDeR2bQFLv5kUWPNWh867

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fa483ca2418dfac2017bf0c870041208_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/hjvddpc.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedhdjdhdh.hdhdjd