General

  • Target

    0f47ab3e4091b6170906aeccdfca02cb_JaffaCakes118

  • Size

    367KB

  • MD5

    0f47ab3e4091b6170906aeccdfca02cb

  • SHA1

    418c7e10d05146b20ed3811dfd1489d5e1b8243b

  • SHA256

    4ad118dcfa9c998042b23c7e6af9ab27d9f19b7dc6b4801e3e4158f7d271c3be

  • SHA512

    183df16a0ce9737774ef6c212d3a5e912c37f2303cb1394989ea4367b5ce3c34b2b3431767d10fa79d2b5d11415861f13f8b7d45805d3c17c69b494f76fb0844

  • SSDEEP

    6144:okNRExR6FlC0Edx2GDidDXU6NZXsrnTHKl7DWu9IliPL7rrgCG4:oWRiYC0k0GWlfAA6uvDnrg7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 11 IoCs

Files

  • 0f47ab3e4091b6170906aeccdfca02cb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9ba9bc6867bc30d6e7600633f9cabe23


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    06e07a9e2c8ec78ec44f1a538a1bd2a2


    Headers

    Imports

    Exports

    Sections

  • $TEMP/9a3e364789b2e55a6ea434ae0309a189/downloaderDDLR.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/9a3e364789b2e55a6ea434ae0309a189/downloaderOFFER0.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/9a3e364789b2e55a6ea434ae0309a189/downloaderOFFER1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/9a3e364789b2e55a6ea434ae0309a189/downloaderOFFER2.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/9a3e364789b2e55a6ea434ae0309a189/downloaderSTUB.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/9a3e364789b2e55a6ea434ae0309a189/preinstaller.exe
    .exe windows:4 windows x86 arch:x86

    dcd4f584cea06b9085635499b2756e76


    Code Sign

    Headers

    Imports

    Sections