General

  • Target

    fab872216501aca2d5af18bf05f05a1d_JaffaCakes118

  • Size

    834KB

  • MD5

    fab872216501aca2d5af18bf05f05a1d

  • SHA1

    978a2dc0d65954f7048e513e699db9e6f631ca7b

  • SHA256

    a36cde42ddf24f35cab53988dbf476a87087211b34ff3b112db1d3cefaf848ac

  • SHA512

    42256b96bf7b983b0681e1d221ea1bbc55f7a41fb29f50cbc4096db63e33f1eb044ff998e7b8db0043f1c26dc7c52c91202f5e81c7903492658bac00dfad3d25

  • SSDEEP

    12288:TygHUJl9bfg2SjNpONFPe+iaNpBcWS7Eq5uKgV2Mdl9bfg2SjNpONFPe+/:TzHUJnbYxNWeNmfJAAP2EnbYxNWeA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fab872216501aca2d5af18bf05f05a1d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin.dll
    .dll windows:4 windows x86 arch:x86

    873a1588ee12ce4e6beb76e8cd787cd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISPlugin_JApply.dll
    .dll windows:4 windows x86 arch:x86

    db6e66bff3da6830d0cb7b1044febeeb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • LeagueClient/Plugins/plugin-manifest.json.jdiff
  • Ӣж.exe.nsis