General

  • Target

    JaffaCakes118_559027c9d5837bad9dec04bd294ec56e41e82b4bacc958fa2f9b03aa5a1a3215

  • Size

    179KB

  • MD5

    5507401eb96f6cf61c4811aabdcc58b9

  • SHA1

    f36d9543d530bd8fa2aa075a87c716b2391697a7

  • SHA256

    559027c9d5837bad9dec04bd294ec56e41e82b4bacc958fa2f9b03aa5a1a3215

  • SHA512

    f8675412609d352af697834ca45758a5b56b8900dc3261c38c4e67b118076a8063cdf08412c67b9a157094e94aa19f8a6666af9f4f017f57bf5eb34b81f3a2e9

  • SSDEEP

    3072:pZt2Kk/gWuoHb5b6MPBRBVO6KvENwih8AI8zE7+bV3t4ausgOIyvx2qJv8OpQnA:pZgKOuEGqBRxvHckOpsgOIixZPqnA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_559027c9d5837bad9dec04bd294ec56e41e82b4bacc958fa2f9b03aa5a1a3215
    .zip

    Password: infected

  • EMBARGO_021217447696270869286003_78519527942036422_5062060_291813391023562_4244700155139402815.bin
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • automatcafer/Apollus6.BRI
  • automatcafer/Custom1.ini
  • automatcafer/folder-templates-symbolic.symbolic.png
    .png
  • automatcafer/network-wireless-signal-ok-symbolic.symbolic.png
    .png
  • automatcafer/pvscsi.sys
    .html
  • automatcafer/revisionsberetningens.Las8