General

  • Target

    JaffaCakes118_aee64c5a3526dba38aacc288a682e5f645140ee9db1dbe13ab3f0b2e3b4798b8

  • Size

    544KB

  • MD5

    4d967121731d63d05b23bee8bc59a98b

  • SHA1

    06620aee28358e11b42331847386332fca4433a6

  • SHA256

    aee64c5a3526dba38aacc288a682e5f645140ee9db1dbe13ab3f0b2e3b4798b8

  • SHA512

    1ba915c762692552eb82c63b646eb595a8ddd501c16cb93f7f0268e6cc72f5b06d6b74b8236e2d50d04ddf9dbdfc12a59056d705b7db4a43ac1bb78d88f7a686

  • SSDEEP

    12288:9WAz6q8Fbg7vskNRGLwaS24zSTFQ2qOsKE5Aj4nKdxpzjYM5cQhb0sqMY:hX8Fs7v7kLwaLcSTFHqhKcAb1zjYbQHE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_aee64c5a3526dba38aacc288a682e5f645140ee9db1dbe13ab3f0b2e3b4798b8
    .zip

    Password: infected

  • fc5ffcb61eee5d39a9d337576bc8aa4a44715ebf467775fb773f2dbf9dd4d537
    .exe windows:4 windows x86 arch:x86

    c05041e01f84e1ccca9c4451f3b6a383


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • Arkivenheder/Miljteknikere/Bovenland/NeGACOM.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    37bf07843001362e17d3834bea6bb2bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bestikkende/Opnormerede/Sonaters/Cantarell-ExtraBold.otf
  • Bestikkende/Opnormerede/Sonaters/ModuleManager.dll
    .dll windows:5 windows x64 arch:x64

    3c4143f18c9c233846f840ceced3ad96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Deuterosy/Guaranties/Rationaliserings/Knivstik/Bass.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Reformate/Realitetsforhandlingens/Aparithmesis/mail-attachment-symbolic.symbolic.png
    .png
  • Spektrografers/Egesborgs/Bruiting78/battery-level-70-charging-symbolic.svg
    .xml
  • Spektrografers/Egesborgs/Bruiting78/emoji-symbols-symbolic.symbolic.png
    .png
  • Spektrografers/Egesborgs/Bruiting78/lang-1048.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Storstilede92/Overdozed130/Smaabrnsstues/Diktaten.Fre
  • bristlemouths.Haa
  • radio_checked_focus.png
    .png
  • top_hook.png
    .png