General

  • Target

    28391819daec6fb37a46f1665bc1a2e0_JaffaCakes118

  • Size

    2.3MB

  • MD5

    28391819daec6fb37a46f1665bc1a2e0

  • SHA1

    c61bfeff729037f7fc5296fcd8feb18760b329a1

  • SHA256

    c0a509dbb237c2cdb9daff6e954fe572513ad9f325062781bb4e6de8fde1f5dc

  • SHA512

    04536ca442919f22bc71d86a2f7640acad01825881f5e3f065ae65c466061709b4363c297712fdd5de42c7e296e47091c3409f3099c0c5b067a19e179c46fd0f

  • SSDEEP

    49152:jKKyipE1UZP/Qaj09hldPUCfBfpottd473K1d8LGdcmcb5Crx67:jgipE1UZQaYDUCjYtd4aoLgSIrx67

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 28391819daec6fb37a46f1665bc1a2e0_JaffaCakes118
    .rar
  • GenerateName/Family.txt
  • GenerateName/Name.txt
  • Hardcodet.Wpf.TaskbarNotification.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • InvisSampLauncher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Resources/InvisLauncherReconnect.lua
  • Resources/connectedicon.ico
  • Resources/connectingicon.ico
  • Resources/disconnecticon.ico
  • Resources/icon.ico
  • Resources/no.png
    .png
  • Resources/ok.png
    .png
  • Servers.txt
  • Settings.ini
  • bin/ChangeIP.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bin/OemVista.inf
  • bin/libcrypto-1_1-x64.dll
    .dll windows:4 windows x64 arch:x64

    22b2266a9c0b139379bdc68c1252a7dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/liblzo2-2.dll
    .dll windows:4 windows x64 arch:x64

    20f66903fa8abcac500e3191d97590f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/libpkcs11-helper-1.dll
    .dll windows:4 windows x64 arch:x64

    29d9f4cdb20dbd2a84b2b955e3b0de54


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/libssl-1_1-x64.dll
    .dll windows:4 windows x64 arch:x64

    3925ac7212361b334e2df3b436aee34a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/openssl.exe
    .exe windows:4 windows x64 arch:x64

    109f682aef28139d85ab01a1296e12fe


    Code Sign

    Headers

    Imports

    Sections

  • bin/openvpn.exe
    .exe windows:4 windows x64 arch:x64

    d84488732e41a2a51934e05d5e22bbdb


    Code Sign

    Headers

    Imports

    Sections

  • bin/openvpnserv.exe
    .exe windows:4 windows x64 arch:x64

    6e7eef93a2c2e561ff45bc2c939ce9c1


    Code Sign

    Headers

    Imports

    Sections

  • bin/openvpnserv2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • bin/tap0901.cat
  • bin/tap0901.sys
    .sys windows:6 windows x64 arch:x64

    a13cebc938af36dab20cc614c6fb7e94


    Headers

    Imports

    Sections

  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    59dfe5c9f961f1417775cd3a41a8be62


    Code Sign

    Headers

    Imports

    Sections