Overview

overview

8

Static

static

3

browsewm.dll

windows7-x64

1

browsewm.dll

windows10-2004-x64

1

corpol.dll

windows7-x64

8

corpol.dll

windows10-2004-x64

8

cryptdlg.dll

windows7-x64

8

cryptdlg.dll

windows10-2004-x64

8

csseqchk.dll

windows7-x64

1

csseqchk.dll

windows10-2004-x64

1

digest.dll

windows7-x64

1

digest.dll

windows10-2004-x64

1

dw15.exe

windows7-x64

1

dw15.exe

windows10-2004-x64

1

dwintl.dll

windows7-x64

1

dwintl.dll

windows10-2004-x64

1

html32.dll

windows7-x64

1

html32.dll

windows10-2004-x64

1

ie4uinit.exe

windows7-x64

3

ie4uinit.exe

windows10-2004-x64

3

iexplore.exe

windows7-x64

1

iexplore.exe

windows10-2004-x64

1

msconv97.dll

windows7-x64

3

msconv97.dll

windows10-2004-x64

3

msencode.dll

windows7-x64

1

msencode.dll

windows10-2004-x64

1

msieftp.dll

windows7-x64

1

msieftp.dll

windows10-2004-x64

1

msxml3.dll

windows7-x64

4

msxml3.dll

windows10-2004-x64

1

msxml3a.dll

windows7-x64

1

msxml3a.dll

windows10-2004-x64

1

msxml3r.dll

windows7-x64

1

msxml3r.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    edcaa4b572c81b0ba2eda26c4d11f2a2_JaffaCakes118

  • Size

    2.0MB

  • MD5

    edcaa4b572c81b0ba2eda26c4d11f2a2

  • SHA1

    4a2ea6012738c38b446b0d6cfe41a12ec5416b12

  • SHA256

    02737d749e4e7a5e245be9ac431b6fa57656c5ef8293191277fe4e239d5a3bec

  • SHA512

    403df01cfd91ab458803270d4df6c3a80a75ef1029833fe9b622447e935a15d9f59f95cf3d16efcf7b5b6ef5db1fd34c710eea6284159632330407cb4e36ac69

  • SSDEEP

    49152:zyowMHO7fs6nkYmnN1aUXXAMmk06XD3qPier+SCWP9:zy7Gc1kYe1aUXQXkxbqP1T59

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • edcaa4b572c81b0ba2eda26c4d11f2a2_JaffaCakes118
    .cab
  • browsewm.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6de91a6a0c367ccc96c94bd07cf1d481


    Headers

    Imports

    Exports

    Sections

  • corpol.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4b6276fbc3934e18d10f8e5b46018252


    Headers

    Imports

    Exports

    Sections

  • cryptdlg.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    60fa2c8c29d653d01cbdf114cd1215fe


    Headers

    Imports

    Exports

    Sections

  • csseqchk.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    af6b76dae03387d755b77ac79920368d


    Headers

    Imports

    Exports

    Sections

  • digest.dll
    .dll windows:5 windows x86 arch:x86

    50cedbfa5d035f62eaab9d872dc880b3


    Headers

    Imports

    Exports

    Sections

  • dw15.exe
    .exe windows:4 windows x86 arch:x86

    eb56ff0b12ba8fed58c88a68553edb5e


    Headers

    Imports

    Sections

  • dwintl.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • html32.cnv
    .dll windows:4 windows x86 arch:x86

    66602ced85b05b270607fc7bb7cf7256


    Headers

    Imports

    Exports

    Sections

  • ie4uinit.exe
    .exe windows:5 windows x86 arch:x86

    793d3b5ec4be99630617f1557d61d3ef


    Headers

    Imports

    Sections

  • iereset.inf
  • iexplore.exe
    .exe windows:5 windows x86 arch:x86

    c86861d7304082407097f39f4401cd08


    Headers

    Imports

    Exports

    Sections

  • msconv97.dll
    .dll windows:4 windows x86 arch:x86

    008f169b96fed91f928db68c2bb9a05f


    Headers

    Imports

    Exports

    Sections

  • msencode.dll
    .dll windows:4 windows x86 arch:x86

    9669d66738d88db15b741b67c7ebc79d


    Headers

    Imports

    Exports

    Sections

  • msieftp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    d6851583de422d68b7d7b3915be4a031


    Headers

    Imports

    Exports

    Sections

  • msxml.inf
  • msxml3.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a6051622e5096ff03b078fb5fc817f88


    Headers

    Imports

    Exports

    Sections

  • msxml3a.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • msxml3r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • plugin.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    cd4a7119bd444d6a5dd0229a1d64d4b4


    Headers

    Imports

    Exports

    Sections

  • proctexe.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    13beee8eac6e8ea23e629767e315c040


    Headers

    Imports

    Exports

    Sections

  • removbak.inf
  • tdc.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    19078ac3231c83b9aed229ab57aedc8f


    Headers

    Imports

    Exports

    Sections

  • url.dll
    .dll windows:5 windows x86 arch:x86

    05dd99e2314a77ed4a4a1359abae9951


    Headers

    Imports

    Exports

    Sections

  • vgx.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    83a0f1e4523818c5f7edbd9b44dabbe6


    Headers

    Imports

    Exports

    Sections