General

  • Target

    36abd76c89031b5236058a1954b0a308_JaffaCakes118

  • Size

    213KB

  • MD5

    36abd76c89031b5236058a1954b0a308

  • SHA1

    6877ea0ea8d676914c0d711148890d87b8930b12

  • SHA256

    7489adad9464f426da311eaa4bdcb7356fb21bae23490b0c525e9d1cabfb04ae

  • SHA512

    a0712fdd6c22ea2259cecaa6340158247e6b985f2999878b85fb943926fca05a30fb5be6926e9da5b63f9b9e115c96376edd127c02b7395436154453ea18632e

  • SSDEEP

    6144:AJfbdibDD8I+6LVs161y72yz2hdc6viUsNG:2YbxS16QrzZ6zsNG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 36abd76c89031b5236058a1954b0a308_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ActivationManager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bd10bfd5b5c1b0aa0e7d5a323d19ec5d


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections