General

  • Target

    fb6bcec103fa23a48fefec137b4221af_JaffaCakes118

  • Size

    21.9MB

  • MD5

    fb6bcec103fa23a48fefec137b4221af

  • SHA1

    d5c4ac52f85c8b2d275a0bc98e8047a5b6c4eab1

  • SHA256

    1ca8bf7b0f58c43a8b55efeab9266b01a3e69397662fa85b50497037964c4e35

  • SHA512

    159cc0e37844d8dd3c70fc9e7590365db1a887fb9c49da9052532a1f1f3b392eb1bf576c140e570bb4f5b592969ad637eac137008eb7a2c4a20c154e95229717

  • SSDEEP

    393216:PGQAoF8pO4ymLAmS6y37P83kOONpMN/P3Wgmw99Vn/e04:PZrF8c4ymu6yg0O7PP99V/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • fb6bcec103fa23a48fefec137b4221af_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/info.ico
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsplugin.dll
    .dll windows:4 windows x86 arch:x86

    214e6840266876a8fd4e8310469c01cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/warning.ico
  • $R0
    .sys windows:5 windows x86 arch:x86

    e255878f84db8d1a1b600c266d42b97f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/$R0
    .dll windows:4 windows x86 arch:x86

    ca1bb66bb23084016b62c346bdec97bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/AlgorithmLib.dll
    .dll windows:5 windows x86 arch:x86

    9cca28177a7262e93390179ed1fb2217


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/EfiMon.sys
    .sys windows:5 windows x86 arch:x86

    e255878f84db8d1a1b600c266d42b97f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/SafeDriverCtrl.dll
    .dll windows:5 windows x86 arch:x86

    28eac52e50ba96251e60c702eb504ec3


    Code Sign

    Headers

    Imports

    Exports

    Sections