General

  • Target

    1142486334a2e1617fc9c0e4544fc0dd_JaffaCakes118

  • Size

    1.8MB

  • MD5

    1142486334a2e1617fc9c0e4544fc0dd

  • SHA1

    7bc33ba9349486ea1fce58e5edab1986b861bc04

  • SHA256

    af22f850f4713aa642d728319a10596721fdca95dcbb8206974f0f9987f488cc

  • SHA512

    6495e88b93660f30293acce8310a808171798c552fecdbf47f64693f0fddfd121265343f27641c0825163d256474599c7af7aadf16e826c66b0e77baae977352

  • SSDEEP

    49152:LSbK4xkM8KQNfut3BHo6ztTlX6TNmc5lEzlLu:1hMhnBHzNyNm0Iu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 1142486334a2e1617fc9c0e4544fc0dd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    5b06c04388040741aaa206de9fe629f2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/ppsdown/io.ini
    .exe windows:4 windows x86 arch:x86

    9882992449b6676af72a47da2618c4f0


    Code Sign

    Headers

    Imports

    Sections

  • Sound/file
    .exe windows:4 windows x86 arch:x86

    9882992449b6676af72a47da2618c4f0


    Code Sign

    Headers

    Imports

    Sections

  • Vista.jpg
    .jpg
  • ppssg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f081458843f2d19144c9ea849004741c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vodnet.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1608bae5534c917be4fa08ef589ad991


    Code Sign

    Headers

    Imports

    Exports

    Sections