General

  • Target

    14a7e7b6675f0e39ebc9d0ea32dcfa3d_JaffaCakes118

  • Size

    982KB

  • MD5

    14a7e7b6675f0e39ebc9d0ea32dcfa3d

  • SHA1

    8a3f33ca7fc6aa941dac6588d377e4490c9f659b

  • SHA256

    a58eb6df9eab33d850e6c28363bd1fe57fb8160ef1da3f5702b1c150d4bf701b

  • SHA512

    9e6a0eba596f9f439d03f80c5748e86d79c12da659f7a913c3d2c60646794c1b3bfaca5f90b92112e87360c5e482680d61dd59f56261c0cc9af7c578f4aeb5cc

  • SSDEEP

    24576:v7p3KgIE+sPHBllt3sRawnhvIQGlFgWSo:vF3nIE+yPsEwJ5q

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 14a7e7b6675f0e39ebc9d0ea32dcfa3d_JaffaCakes118
    .zip
  • file_id.diz
  • order.txt
  • readme.txt
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    a3b0ee1fb29253dbfbd34b387e7a55c9


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/reg_dialog.ini
  • Uninstall.exe.nsis
  • avpr.chm
    .chm
  • avpr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • file_id.diz
  • license.doc
    .doc windows office2003

    ThisDocument

  • order.txt
  • readme.txt