General

  • Target

    cb4da8d6687f68a0be74c739e99e8d6e_JaffaCakes118

  • Size

    1023KB

  • MD5

    cb4da8d6687f68a0be74c739e99e8d6e

  • SHA1

    70549e46d78a5918d999d9b79addfa24d62017f5

  • SHA256

    a78e9fe40033af4805bfaddb4fa8b449010fbe0a329569e54583ddba6a76972c

  • SHA512

    01ba83381fb87b2fc15792d461ab4475cf12f3a2295d6b83ccbbc4db59bf9265b4e9067fd5630e434cf00e36553bdd603ef754c250d0e1dec02b1961bcc96afd

  • SSDEEP

    24576:QE+z2tCxXcI4tzcYD3+0jyZ30yesjISzxNyGgukmURQ3:xdCJZ4tzcYD3+eyOycqlzkmUK3

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • cb4da8d6687f68a0be74c739e99e8d6e_JaffaCakes118
    .rar
  • Exifer/Exifer/Exifer.ENG
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Exifer/Exifer/Exifer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Exifer/Exifer/ExiferShellExt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Exifer/Exifer/changes.txt
  • Exifer/Exifer/disclaimer.txt