General

  • Target

    2f844b63a840a1222551cfa9a3931396_JaffaCakes118

  • Size

    261KB

  • MD5

    2f844b63a840a1222551cfa9a3931396

  • SHA1

    85277451396e2732fd4d86d893d923aa1335c87a

  • SHA256

    f5fe443959ff4387551c911a56fe7295ac4394f42ff33d681fb1d57ed2f5e43c

  • SHA512

    ddd47d2282640e5f798cfc0bf6336abe0fdb4cceb8c99b8ac4994efd7d6db965601973117eff6f072c831cb5ffbf4bfafa8b4195254974746777b5eb85403506

  • SSDEEP

    3072:EQIURTXJZ0poLXuqaLHVEXMEcjxgQq/cLVY9cU9p9NmktZO7CJXe81/lxlkc2XDW:Es30KzMAEjxg5kBY9cU9zjmEFHlkFi7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2f844b63a840a1222551cfa9a3931396_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/bab.bmp
  • $PLUGINSDIR/bab_off.bmp
  • $PLUGINSDIR/bab_on.bmp
  • $PLUGINSDIR/box.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/stvheader.bmp
  • $PLUGINSDIR/stvheader2.bmp
  • $PLUGINSDIR/v_sign.bmp
  • $PLUGINSDIR/x.bmp