Overview
overview
7Static
static
337a0b78e19...18.exe
windows7-x64
737a0b78e19...18.exe
windows10-2004-x64
7$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...se.dll
windows7-x64
3$PLUGINSDI...se.dll
windows10-2004-x64
3$PLUGINSDI...ig.dll
windows7-x64
3$PLUGINSDI...ig.dll
windows10-2004-x64
3$PLUGINSDI...ay.dll
windows7-x64
3$PLUGINSDI...ay.dll
windows10-2004-x64
3$PLUGINSDI...re.dll
windows7-x64
3$PLUGINSDI...re.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI..._n.dll
windows7-x64
3$PLUGINSDI..._n.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDIR/nxs.dll
windows7-x64
1$PLUGINSDIR/nxs.dll
windows10-2004-x64
1$TEMP/$_73_/ext.exe
windows7-x64
1$TEMP/$_73_/ext.exe
windows10-2004-x64
1General
- Target 37a0b78e19c25f27df230a7b90971db0_JaffaCakes118
- Size 569KB
- Sample240512-b91f7adh34
- SHA256 22894ff22c8ce3cba8869242622460bb9168deb05e724bf6371433df60d6280f
- MD5 37a0b78e19c25f27df230a7b90971db0
- SHA1 b6362b4ad7a4e93809d11d6417e8bc550c642f05
- SHA512 ecdf4284fcaba23941e36f7cd05f99b7d3a99ce57f7e22d22e9294b375ea04a6187ef27484bd8bf44c4b4a9ec304d362c5947db331f0fde74cee4dc351351877
- SSDEEP 12288:DFdIJTu8vzHunn+f0c9R2dvJNRMXRQuIe6/P3N8AbfdmaMx:DFdIJTP7Hin+f03vJNIRIe6/fN8WfdFs
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
37a0b78e19c25f27df230a7b90971db0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
37a0b78e19c25f27df230a7b90971db0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/CustomLicense.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/CustomLicense.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/IpConfig.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/IpConfig.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISpcre.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISpcre.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/inetc_n.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/inetc_n.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nxs.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nxs.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
$TEMP/$_73_/ext.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$TEMP/$_73_/ext.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
- Target 37a0b78e19c25f27df230a7b90971db0_JaffaCakes118
- Size 569KB
- SHA256 22894ff22c8ce3cba8869242622460bb9168deb05e724bf6371433df60d6280f
- MD5 37a0b78e19c25f27df230a7b90971db0
- SHA1 b6362b4ad7a4e93809d11d6417e8bc550c642f05
- SHA512 ecdf4284fcaba23941e36f7cd05f99b7d3a99ce57f7e22d22e9294b375ea04a6187ef27484bd8bf44c4b4a9ec304d362c5947db331f0fde74cee4dc351351877
- SSDEEP 12288:DFdIJTu8vzHunn+f0c9R2dvJNRMXRQuIe6/P3N8AbfdmaMx:DFdIJTP7Hin+f03vJNIRIe6/fN8WfdFs
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/ButtonEvent.dll
- Size 4KB
- SHA256 d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f
- MD5 55788069d3fa4e1daf80f3339fa86fe2
- SHA1 d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96
- SHA512 d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616
- SSDEEP 96:hrA2+5HGZFYJf9D8IjDflDCoMzncsGSmE:hE2+5mMJfJ8v1zFGSm
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/CustomLicense.dll
- Size 4KB
- SHA256 bdf2d5ac95808ffe5b29aac71fcc2eb64bdca5b272a9c4082a74e20d0b1f20da
- MD5 ae97fd89eec5000b400e6bc7e8db0e56
- SHA1 7ec1073f712ff5bd68deec894c36c0385bacdd68
- SHA512 2e0d0182d7fda547bfd3f25c56d0c20ba75809ac8d4c96c2b40aad3db9a61c730a650c7e02c6050ab37abdf8ce66ea1e4479921d72e21f55b6fd42a3dc033ec3
- MD5 SHA1 SHA512
Score3/10 -
- Target $PLUGINSDIR/IpConfig.dll
- Size 114KB
- SHA256 ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08
- MD5 a3ed6f7ea493b9644125d494fbf9a1e6
- SHA1 ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8
- SHA512 7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1
- SSDEEP 1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/NSISArray.dll
- Size 18KB
- SHA256 b279c82b7e6f6bf652c5b5440c20f01d522f6e8d3c79b72076e18796166316f6
- MD5 c4279b957d4dc593074479bc088b74c1
- SHA1 53de3c1bb13a19a0ae19d9db5cbef1b919520f83
- SHA512 c1746122489ceb6c3af6c535beccd8d9d853c53dcb41274f122c43bc0ea5f9fe83873218e22d9c69a39f83ed54e7d5b8b9ab0adefaec23cf5d8c3a51438688c5
- SSDEEP 384:DCuvLnlVk/V6r7OpI5czJwLJuJJKymEA3SLNk4Eqe05:bDlVk/Xp7TKymeLN1Eo
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/NSISpcre.dll
- Size 164KB
- SHA256 43041f8540dccbc33268bfbef53037d17170b037f6393e77c21429f303ae828f
- MD5 bfe060c22b44914e05d3f5367de6c9fe
- SHA1 24c72b0b57b0066a5e8b235104a0502400e44b9a
- SHA512 ad3a23edd8d62b198e4a2ccf03f6d607dee41fa23fd6f9dfabdc5ee424b5e22a6e00b8a28e50fe177829a2cc25ce05484423e97c682036fc5146e2adf560bc44
- SSDEEP 3072:5YFyk+vtvpoYYPkoYMtXTP5V+4Km//sbJVlseEOb+Y+UT:KFyznYntXL5XKCk9MeEm7
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/inetc_n.dll
- Size 20KB
- SHA256 3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
- MD5 e541458cfe66ef95ffbea40eaaa07289
- SHA1 caec1233f841ee72004231a3027b13cdeb13274c
- SHA512 0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
- SSDEEP 384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- MD5 acc2b699edfea5bf5aae45aba3a41e96
- SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/nxs.dll
- Size 6KB
- SHA256 033e93ad470241c92762924ccfceafb849a525e263e5d4a3dbcfc2e07a8803c3
- MD5 8ca09b6200ffa05b54c6672d855beb4a
- SHA1 daa16fe49c8b2250e9d2383b861cda51f876de49
- SHA512 6ab97181ec45430888d8ad3fd411de22423e1c057833e282af085a975198338c95f7ba10b7c69f33298afc88ddd38d01ab010998fd4a8ba8abb8561796bf9f14
- SSDEEP 48:qnnScipSivON+tPTCkWqjqoay6NvC9A220B20BNatQK5zAgQIl0YawUy11TKcZ8Q:an3N+2AjqoWvC5VRxMLawvxM
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target $TEMP/$_73_/ext.doc
- Size 574KB
- SHA256 c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf
- MD5 42badc1d2f03a8b1e4875740d3d49336
- SHA1 cee178da1fb05f99af7a3547093122893bd1eb46
- SHA512 6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c
- SSDEEP 12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A
- MD5 SHA1 SHA512 SSDEEP
Score1/10