General

  • Target

    fd469d53f333acd7095003b28a381485_JaffaCakes118

  • Size

    677KB

  • MD5

    fd469d53f333acd7095003b28a381485

  • SHA1

    e8b677b81c94be910f1ab79a23dd3ba0fcba7d80

  • SHA256

    10f4fb7c9130d9bfa459f46611f2257a4a88bb83cb1aec961258f35b2cf3257b

  • SHA512

    c67c74c5a12e42aec6bffb5c96c78dea22f9d7174222d4209ef9448a5af2086ed1a5e675e8527567f9fb66664ed5a1ac63cfe9570a60ecde9394d82995ba3c39

  • SSDEEP

    12288:5kQd0J0dKfg1Bno1+Hc1WA2vTb3vZITWUIfLff4L0JaLxJM8NFS3MycUFCwkbWXl:5kQd2jg1Bn7Hc1Ev5tfsfb9LS3Jc4SWV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • fd469d53f333acd7095003b28a381485_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/snkwxvt.dll
    .dll windows:6 windows x86 arch:x86

    ef0395c3130920c1f8c8dc12ea63a782


    Headers

    Imports

    Exports

    Sections

  • 1432188082.fcbcabficja