General

  • Target

    fa8aabb56b8305406d6d303a5252fd26_JaffaCakes118

  • Size

    677KB

  • MD5

    fa8aabb56b8305406d6d303a5252fd26

  • SHA1

    22d05ad91cae93d414eeefc017151511de4f4592

  • SHA256

    22a2bf7a85555512dbcd35a549fa37f3e19862073babbdf2920dafc6fe05cecd

  • SHA512

    78643214b11966b8e475aefa4cd4106c57c8d75888e9b798cf025c98c1d08d07ba72c72edb6ce9815c85c93a4e31a663d07197cb119095acf3f66e1ead6521c1

  • SSDEEP

    12288:PuPXIAuSVwuCuHYAOn6BqPP3XL48mc5i1SvI4aB5/pg79ef1IxrvC:PuPY6iuCeYn6AVp5iY7aH/I4f1c6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fa8aabb56b8305406d6d303a5252fd26_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tychorh.dll
    .dll windows:6 windows x86 arch:x86

    ef0395c3130920c1f8c8dc12ea63a782


    Headers

    Imports

    Exports

    Sections

  • 1432155682.fcacabficbf