General

  • Target

    3f317760b6d2220450d348a8941dd26c_JaffaCakes118

  • Size

    1.4MB

  • MD5

    3f317760b6d2220450d348a8941dd26c

  • SHA1

    63c2402391077b197963d5d60c9c23a94331b07c

  • SHA256

    a62754f98f2f25c01db50fdc74dd89a312cdc50d7aa607acb1e80b858294e152

  • SHA512

    6c39f88fce263be6e3f996e365ba913e265a296e75d0d8dd382a0af0f28b2757a76d0ec100910000f4900ddd0cdcb7fbdaed5a561f10b6192ae79412ef0753c7

  • SSDEEP

    24576:B+0Dp2TOCfb4DhieR1JhM0eieDQNCABIISEHZspBjnY7BF1O3RkjXNuEJ3h:B+0DpcnIhpxlde0NCkSmZsEtFskxuEJx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3f317760b6d2220450d348a8941dd26c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    42134c4fb1b2d3cf6b447e018a5de700


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BtmImg.bmp
  • $PLUGINSDIR/Header.bmp
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LeftImg.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • BeatTrojanScan.dat
  • BeatTrojanScan.exe
    .exe windows:4 windows x86 arch:x86

    aaa734bdf233e7b6248c47353f08a15f


    Headers

    Imports

    Sections

  • BtSetting.ini
  • GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    7d265bc0350ed04fb2dffec878eb283e


    Headers

    Imports

    Exports

    Sections

  • HotfixSetting.ini
  • Lang/Chinese.dat
  • WindowsɯźFϤо.url
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    42134c4fb1b2d3cf6b447e018a5de700


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BtmImg.bmp
  • $PLUGINSDIR/Header.bmp
  • $PLUGINSDIR/LeftImg.bmp