Overview

overview

10

Static

static

3

1b023b6f6a...18.exe

windows7-x64

10

1b023b6f6a...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$TEMP/shwa.dll

windows7-x64

3

$TEMP/shwa.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b023b6f6a4447cd8c2d8e841f542227_JaffaCakes118

  • Size

    344KB

  • MD5

    1b023b6f6a4447cd8c2d8e841f542227

  • SHA1

    397af11ba7d160ab76f3099798257c057790280a

  • SHA256

    465e437108d6f904ff77ea9a39df2e764449efeb2100c79fbba6cb092b0d3633

  • SHA512

    3326329715fc325a712607b59204a17ec1f8d19868fc644ec1fe282b5c5e40577faff17c372e1c2ab885a9f37d96e09afee4e5ca27b424f3e10140b1b7cd8150

  • SSDEEP

    6144:fWNdxridQv5Rzh+uSrEga5GJvh4BTFWSPEhaxso8zM2bGgWzRXEGPLyhq9rf7qu5:udxed4guKEge2vh4BTFWwCo0M2bEzRXn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 1b023b6f6a4447cd8c2d8e841f542227_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Excogitator
  • $TEMP/HxMailAppList.targetsize-30_altform-unplated.png
    .png
  • $TEMP/INTRO_300px.80.png
    .png
  • $TEMP/shwa.dll
    .dll windows:4 windows x86 arch:x86

    4860ccbd184e16567137f811d8ff567a


    Headers

    Imports

    Exports

    Sections