Overview

overview

7

Static

static

3

f5c77ef216...18.exe

windows7-x64

7

f5c77ef216...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

SpyOut.exe

windows7-x64

1

SpyOut.exe

windows10-2004-x64

1

SpyOutLaunch.exe

windows7-x64

3

SpyOutLaunch.exe

windows10-2004-x64

7

SpyOutUp.exe

windows7-x64

1

SpyOutUp.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5c77ef21662451265e0828c66274852_JaffaCakes118

  • Size

    1.7MB

  • MD5

    f5c77ef21662451265e0828c66274852

  • SHA1

    5e479f7e68943f792e754fac4bea372c41fc8b5d

  • SHA256

    02ed70ca5fc0e47d0cb7016a0959a0793853beaa8bba1e1d26b9fe9489c798fe

  • SHA512

    02abf7e20f37041d0594deccc2daa59ffed761b0d7f898f2cccf93502c9719729abe03f7e67348b645c3107c7a0dc7db602eb67c40dbc103794f6e0bdf7069f8

  • SSDEEP

    49152:itLrXclQ6jGV1C4MSRBSAXTdxd8rNPk45COkDwuFhnEo:itLgQBqoRBSAX58rG45COPuFP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • f5c77ef21662451265e0828c66274852_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • SpyOut.exe
    .exe windows:4 windows x86 arch:x86

    25ad776e1e845d6bed6adda335455896


    Headers

    Imports

    Sections

  • SpyOutLaunch.exe
    .exe windows:4 windows x86 arch:x86

    8d6d1ba65cc3f02a565c74da77fcdefd


    Headers

    Imports

    Sections

  • SpyOutUp.exe
    .exe windows:4 windows x86 arch:x86

    8a5cfd1a3ec6e70e9b630a4f43976542


    Headers

    Imports

    Sections

  • data/dt.cab
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections