Overview

overview

7

Static

static

3

0f94594cbe...18.exe

windows7-x64

7

0f94594cbe...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...il.exe

windows7-x64

1

$PLUGINSDI...il.exe

windows10-2004-x64

1

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

1

$PLUGINSDI...ll.dll

windows10-2004-x64

1

$PLUGINSDI...sg.dll

windows7-x64

1

$PLUGINSDI...sg.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

32/SbieDll.dll

windows7-x64

3

32/SbieDll.dll

windows10-2004-x64

3

32/SbieSvc.exe

windows7-x64

1

32/SbieSvc.exe

windows10-2004-x64

1

SandboxieBITS.exe

windows7-x64

1

SandboxieBITS.exe

windows10-2004-x64

1

SandboxieCrypto.exe

windows7-x64

1

SandboxieCrypto.exe

windows10-2004-x64

1

SandboxieD...ch.exe

windows7-x64

1

SandboxieD...ch.exe

windows10-2004-x64

1

SandboxieRpcSs.exe

windows7-x64

1

SandboxieRpcSs.exe

windows10-2004-x64

1

SandboxieWUAU.exe

windows7-x64

1

SandboxieWUAU.exe

windows10-2004-x64

1

SbieCtrl.exe

windows7-x64

1

SbieCtrl.exe

windows10-2004-x64

1

SbieDll.dll

windows7-x64

1

SbieDll.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f94594cbef489a8ddca285f1ca52ca4_JaffaCakes118

  • Size

    2.9MB

  • MD5

    0f94594cbef489a8ddca285f1ca52ca4

  • SHA1

    88bfb5abc03b93e43076d4bca13c25cdd8498b52

  • SHA256

    2d849d1e6cda005bc5ddc6e95247ed6e0e1184db2d1380fe99999e3765fd8a67

  • SHA512

    abe6df2db5521f4c43d887a788e09abbd8e84292ad7d29a656ecb0ab7a8a4f9b3e20ea458e5a6d18276447ba5b6f628cfc04456fe994a6ab3d19b3473ed5bccb

  • SSDEEP

    49152:FrAS1ZsOLcjtmCmL9X95++9PQOHy34fKseTq0XStBDbJ1oAPC2Sa1sUb9w7nhBY:FrAKOJmZ7I+9pS35seTjXStRbTo+QaCc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 0f94594cbef489a8ddca285f1ca52ca4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    ab6770b0a8635b9d92a5838920cfe770


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    738dc9bb91549f627cf1953c2000e1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallType.ini
  • $PLUGINSDIR/KmdUtil.exe
    .exe windows:6 windows x64 arch:x64

    b8b599595af087487fcb027000b05c56


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    4e5f0ae8071ae04cdb537283701198ff


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SbieDll.dll
    .dll windows:6 windows x64 arch:x64

    f0720de5fdc56f1106865beb1ce65e40


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SbieMsg.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Warning.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 32/SbieDll.dll
    .dll windows:6 windows x86 arch:x86

    ce070c348ee9364cd79560d2fcfdcd67


    Headers

    Imports

    Exports

    Sections

  • 32/SbieSvc.exe
    .exe windows:6 windows x86 arch:x86

    84e3b1fee1ea50c0e30f232ce1bb064e


    Headers

    Imports

    Sections

  • LICENSE.TXT
  • Manifest0.txt
  • Manifest1.txt
    .xml
  • Manifest2.txt
    .xml
  • SandboxieBITS.exe
    .exe windows:6 windows x64 arch:x64

    6b71d7f79db3c857f06517742d556164


    Headers

    Imports

    Sections

  • SandboxieCrypto.exe
    .exe windows:6 windows x64 arch:x64

    6162d7ab6bf5caea8505b89458f502d9


    Headers

    Imports

    Sections

  • SandboxieDcomLaunch.exe
    .exe windows:6 windows x64 arch:x64

    cd0dee3ce8ebf27bf66607df49b16ad9


    Headers

    Imports

    Sections

  • SandboxieRpcSs.exe
    .exe windows:6 windows x64 arch:x64

    eeeb2fafcce3c4928f88f18ce7b28949


    Headers

    Imports

    Sections

  • SandboxieWUAU.exe
    .exe windows:6 windows x64 arch:x64

    064a17cde4775404badced095bed7097


    Headers

    Imports

    Sections

  • SbieCtrl.exe
    .exe windows:6 windows x64 arch:x64

    327164236dd80be8897658bb6de26244


    Headers

    Imports

    Sections

  • SbieDll.dll
    .dll windows:6 windows x64 arch:x64

    f0720de5fdc56f1106865beb1ce65e40


    Headers

    Imports

    Exports

    Sections

  • SbieDrv.sys.rc4
  • SbieIni.exe
    .exe windows:6 windows x64 arch:x64

    2632883fcd6c2213476c1ec3a069a17f


    Headers

    Imports

    Sections

  • SbieMsg.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • SbieSvc.exe
    .exe windows:6 windows x64 arch:x64

    84e14501b027156a26cbcf49dcfe42d6


    Headers

    Imports

    Sections

  • SboxHostDll.dll
    .dll windows:6 windows x64 arch:x64

    68896ca8adf90da4b445a788587b75c0


    Headers

    Imports

    Exports

    Sections

  • Start.exe
    .exe windows:6 windows x64 arch:x64

    50771a4e24d4aafea3e777bd4d648c9b


    Headers

    Imports

    Sections

  • Templates.ini