Overview

overview

7

Static

static

3

ea3bc6e342...18.exe

windows7-x64

7

ea3bc6e342...18.exe

windows10-2004-x64

7

tmp/uninstall.exe

windows7-x64

7

tmp/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

tmp/zmp3s.exe

windows7-x64

3

tmp/zmp3s.exe

windows10-2004-x64

3

zmp3.dll

windows7-x64

1

zmp3.dll

windows10-2004-x64

1

zmp3.exe

windows7-x64

3

zmp3.exe

windows10-2004-x64

3

zmp3s.exe

windows7-x64

3

zmp3s.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea3bc6e3420211ccdfa739692880eab4_JaffaCakes118

  • Size

    367KB

  • MD5

    ea3bc6e3420211ccdfa739692880eab4

  • SHA1

    a268f2d4d35a7dc70958034f67a37a6ce5ad1b10

  • SHA256

    14276a4f40426ca69d0076e18875a04dc221db987cafa1aab73301c9a0b2a31b

  • SHA512

    66f07bb9420c9f055595847fb6ecacac15b28ed3400fe27ae6d35ee65ef629450122ce454dea5752447e58b598b945730d4f99f5f23728abd5046d116e7dc939

  • SSDEEP

    6144:7DI8zTCwMpJZYR93dkLJ+CZ+FYAlLmJUDVXWRv5zYLJoDnWCkU7U/vEoR:dsp4m8F99WTzCJoD9dUx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • ea3bc6e3420211ccdfa739692880eab4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • default.mp3
  • tmp/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • tmp/zmp3s.exe
    .exe windows:4 windows x86 arch:x86

    d0406343e5a482909c40602c53c38395


    Headers

    Imports

    Sections

  • zmp3.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3a56063d45a845d7c60e54e273cb8597


    Headers

    Imports

    Exports

    Sections

  • zmp3.exe
    .exe windows:4 windows x86 arch:x86

    0c0204bc2f62247c6e6b51de8d26e63b


    Headers

    Imports

    Sections

  • zmp3_ver.ini
  • zmp3s.exe
    .exe windows:4 windows x86 arch:x86

    d0406343e5a482909c40602c53c38395


    Headers

    Imports

    Sections