Overview

overview

10

Static

static

3

309aa62b90...18.exe

windows7-x64

10

309aa62b90...18.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

25.html

windows7-x64

1

25.html

windows10-2004-x64

1

catalog.js

windows7-x64

3

catalog.js

windows10-2004-x64

3

constants$...100.js

windows7-x64

3

constants$...100.js

windows10-2004-x64

3

cua700985938.html

windows7-x64

1

cua700985938.html

windows10-2004-x64

1

cua768556328.html

windows7-x64

1

cua768556328.html

windows10-2004-x64

1

cua811702334.html

windows7-x64

1

cua811702334.html

windows10-2004-x64

1

gkamus-uninst.exe

windows7-x64

7

gkamus-uninst.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

navigation.js

windows7-x64

3

navigation.js

windows10-2004-x64

3

writing.html

windows7-x64

1

writing.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    309aa62b90a286c54ffcae887aadbf0b_JaffaCakes118

  • Size

    347KB

  • MD5

    309aa62b90a286c54ffcae887aadbf0b

  • SHA1

    9194f50d1c11e0bbc7e8b3697ba2f3fac42ee853

  • SHA256

    692878ac81e6439a2af9d3e558b4456a5abae4c029a196b62e8b5b316fd3571b

  • SHA512

    e28840eca6e3c82b5808faed56c7a332515f9fe9ddd7af25b839f6fade25f6a3319e4f8b514d66a10ff1434906bc42a9e2fb18c28acf36ce3e970787a1eea09f

  • SSDEEP

    6144:YZ/qRrMhvBX9YuyY3qj8Qlb5D6WWhJAqDhUNEH09XA4pMj:YBZhvd9Yu5aj8Qld25wcv4pMj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 309aa62b90a286c54ffcae887aadbf0b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d4b94e8ee3f620a89d114b9da4b31873


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • 25
    .html .js polyglot
  • app.css
  • catalog.js
  • [email protected]
    .js
  • cua700985938.html
    .js
  • cua768556328.html
    .js
  • cua811702334.html
    .js
  • default867476207.atom+xml
    .xml
  • gkamus-uninst.exe
    .exe windows:4 windows x86 arch:x86

    d4b94e8ee3f620a89d114b9da4b31873


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • navigation.js
    .js
  • style1880293334.css
  • writing
    .html .js polyglot