General

  • Target

    0de1e637e93c4dfbbb5e6a3721763162_JaffaCakes118

  • Size

    213KB

  • MD5

    0de1e637e93c4dfbbb5e6a3721763162

  • SHA1

    e77e18b2460f84368abd3f08053690ce2f83e314

  • SHA256

    7868ee3c6bab4ea21539d3fc3d880e2605881e5d6bea972946351d62ed54d1fd

  • SHA512

    13f6d3195b44108eb5f5fc5b9646beebd665c3890403a0b80ed2b8f21b2e9738f6a91eeaa5c29281153780513bdb8aeae875978770acc9c8cd7efe6da12c4d9b

  • SSDEEP

    3072:AGW3B+DukJFU42ibIztq75uS/QhnhocBRT8AjkpNa+3nKTcG4HcdcSvlQpCcdvWH:AJffibI5qFuS/Ih1BfWNkTPdc6lyUsNO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0de1e637e93c4dfbbb5e6a3721763162_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ActivationManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bd10bfd5b5c1b0aa0e7d5a323d19ec5d


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections