General

  • Target

    253ecfc13b12d638136009c214c96c98_JaffaCakes118

  • Size

    1.4MB

  • MD5

    253ecfc13b12d638136009c214c96c98

  • SHA1

    a0dfcbf395171f1ac758c073427a6d30774c99bf

  • SHA256

    0c0fc343c27c81e1a6bf34d8e7c71bbe778a3d24c544449bb87ad05fb511594c

  • SHA512

    c95d1ed644685384a739b8efa526d5078f7e765c06df2f7b28c928c420fcb1f1f5c2c95dcc1ad00c0ce2db8882372794918d4c600636309b6f8e9d972c9e35c5

  • SSDEEP

    24576:PPPVV1TAqtoaKc3XBJdZCpJbgzsOO8XFuamXM2o4PiZvfoMUY43H7XxaeMal0D2y:PPPjFAqtT3Xrdkn8BfUXM46Zo311iAiR

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 253ecfc13b12d638136009c214c96c98_JaffaCakes118
    .zip
  • GH Injector - x64.dll
    .dll windows:6 windows x64 arch:x64

    e8f3ee13ac22c9686978eb1060f9b574


    Headers

    Imports

    Exports

    Sections

  • GH Injector - x64.exe
    .exe windows:5 windows x64 arch:x64

    77d45b1ee20c3b020c48ab42d23ce5ef


    Headers

    Imports

    Sections

  • GH Injector.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • WallHack_CF.dll
    .dll windows:6 windows x86 arch:x86

    bab3e0e5b11ab0d1d85c0712134543a0


    Headers

    Imports

    Sections