General

  • Target

    0dbb38c7f8145f76365385a9faf1d3a4_JaffaCakes118

  • Size

    6.0MB

  • MD5

    0dbb38c7f8145f76365385a9faf1d3a4

  • SHA1

    8a3553e5cbeb08afaa8ce0794fec2cdeead70f31

  • SHA256

    abfca6441f5efc9310a8e60eacb846247537374f42e1feb9c137b62954e39759

  • SHA512

    536ddc951e22c8d1be4d6e0160205d356d79178764534b47814115fa15d17f0117e055d0688a72cadd766cdb9e1121d19e275ccbc2136b0073ae2cbcf63f14a2

  • SSDEEP

    98304:p/qr5ExYJijNz/ZczJeWrpX4yYUGq4FKRXNQmZc6+/3s5/wtsxMslRV:p/qNEP5z/ZczJdI29EKRXN/eX/3m/wtI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dbb38c7f8145f76365385a9faf1d3a4_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SetupHelper.dll
    .dll windows:4 windows x86 arch:x86

    d9997cc22607493388b309294c30bacc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/AndroidAssistHelper.dll
    .dll windows:5 windows x86 arch:x86

    a1fe0776271ee9dd31c5c9c658559244


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/ConnectService.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/PluginInfo.xml
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.dat
  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.exe
    .exe windows:4 windows x86 arch:x86

    1d1c3301f65dea3f2ff328d0c37359db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CacheWechatBackup/Plugins/WechatBackup/WechatBackup.rdb