Overview

overview

7

Static

static

3

ec497610ba...18.exe

windows7-x64

7

ec497610ba...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$TEMP/Inst...es.exe

windows7-x64

1

$TEMP/Inst...es.exe

windows10-2004-x64

1

$TEMP/sobar.exe

windows7-x64

7

$TEMP/sobar.exe

windows10-2004-x64

7

DevCompone...r2.dll

windows7-x64

1

DevCompone...r2.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

SNSHelper.dll

windows7-x64

1

SNSHelper.dll

windows10-2004-x64

1

�...��.exe

windows7-x64

1

�...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec497610ba3990c58a2f3107f6219e5d_JaffaCakes118

  • Size

    1.6MB

  • MD5

    ec497610ba3990c58a2f3107f6219e5d

  • SHA1

    2b0df4cf3bdfc2c1827b57ece46643e9b68d21a5

  • SHA256

    cf284e8e4db5febc02a553294d5d4ce21acf5a27d7825244d420b8b98e71a74a

  • SHA512

    1c68c282efd3607b24d6af28872bab628726350a79d20ccf7739a13e1517bc28728ea6d2a4b1918fedb1d92125c7adb24e042daeb1afbe0fbd6f381d8641dd0e

  • SSDEEP

    24576:0teG4+V2Ef4xvYeCbq62pT6fM1YT3ZwkvmTyPR2gTiwF5Fd1Qreve2bt3J:OX4wgdYRAFOTakv6UTeevewJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • ec497610ba3990c58a2f3107f6219e5d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/houdao.ico
  • $SYSDIR/movie.ico
  • $TEMP/InstallServices.exe
    .exe windows:4 windows x86 arch:x86

    dd747c9e92d3f00963619c82c8c8a534


    Headers

    Imports

    Sections

  • $TEMP/sobar.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • Animals.xml
  • CommonSeed.xml
  • DevComponents.DotNetBar2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Newtonsoft.Json.xml
    .xml
  • SNSHelper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SpecialSeed.xml
  • readme.txt
  • ʹ˵.txt
  • ԰ũ.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections