General

  • Target

    296c2a0518a763b58a4a1efd119006f2_JaffaCakes118

  • Size

    159KB

  • MD5

    296c2a0518a763b58a4a1efd119006f2

  • SHA1

    3e46f3495bc1931c07d2f2684afacffa71d1ecae

  • SHA256

    f63fbaa263980a91273a84c79b8207d8dd45739f19ffafff36f5fe822868d70e

  • SHA512

    59b95fbfc3ba33ba1ff34bff1c94dc79d71f7ba372c4e8b4f65af06f4efa3404ec25186536382ce6b7a3e7820cec3a5bd01911a51501ccd3d13a198bb1d6e1ee

  • SSDEEP

    3072:n22ihA0m3BJf0AHM2cWbu8yCmb0jF7JpZoSugdH/OTydX3peqD:4A0m3T0AIWCnCmb0jtJpm4hogXZJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 296c2a0518a763b58a4a1efd119006f2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/biclient.exe
    .exe windows:5 windows x86 arch:x86

    b8d007ed3e4042c6c59608a270f27c92


    Headers

    Imports

    Sections

  • $TEMP/config.ini