General

  • Target

    144716bea905551006d460b98747b7b8_JaffaCakes118

  • Size

    492KB

  • MD5

    144716bea905551006d460b98747b7b8

  • SHA1

    759aa053c6b25f80da547d79b407359d82dd3c82

  • SHA256

    2f43588e18f8467e6dfe7704baf07f6bb2a3dd244bf6454d8cb61bb48791bb9e

  • SHA512

    522e18c34ac3270a1605c84333f3bcd5ab85d2620b3f9b2b06db146d6bfec61f3d6ebe90db390451bb0d8948acc56e05a25a0ea0e37ec2e5f14cd2be8db7d452

  • SSDEEP

    6144:vuk4fqj3RQqF6jtY03ZgLpp6TURimpBwXVUTL7E97IkXQxBRUoz0JehYvH7Aw0v9:Z4fwV6peEUBwXVwM9vylzdYvH7AwC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 11 IoCs

Files

  • 144716bea905551006d460b98747b7b8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    6c01223cb63ee4264a1cff8d0322dcde


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    06e07a9e2c8ec78ec44f1a538a1bd2a2


    Headers

    Imports

    Exports

    Sections

  • $TEMP/f93e531c6a103cc8b5ac2d3cf2e95769/downloaderDDLR.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/f93e531c6a103cc8b5ac2d3cf2e95769/downloaderOFFER0.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/f93e531c6a103cc8b5ac2d3cf2e95769/downloaderOFFER1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/f93e531c6a103cc8b5ac2d3cf2e95769/downloaderOFFER2.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/f93e531c6a103cc8b5ac2d3cf2e95769/downloaderSTUB.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/f93e531c6a103cc8b5ac2d3cf2e95769/preinstaller.exe
    .exe windows:4 windows x86 arch:x86

    c75aa021b4be3f016821b31d91352687


    Code Sign

    Headers

    Imports

    Sections