Overview

overview

7

Static

static

3

37a0b78e19...18.exe

windows7-x64

7

37a0b78e19...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI..._n.dll

windows7-x64

3

$PLUGINSDI..._n.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nxs.dll

windows7-x64

1

$PLUGINSDIR/nxs.dll

windows10-2004-x64

1

$TEMP/$_73_/ext.exe

windows7-x64

1

$TEMP/$_73_/ext.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37a0b78e19c25f27df230a7b90971db0_JaffaCakes118

  • Size

    569KB

  • MD5

    37a0b78e19c25f27df230a7b90971db0

  • SHA1

    b6362b4ad7a4e93809d11d6417e8bc550c642f05

  • SHA256

    22894ff22c8ce3cba8869242622460bb9168deb05e724bf6371433df60d6280f

  • SHA512

    ecdf4284fcaba23941e36f7cd05f99b7d3a99ce57f7e22d22e9294b375ea04a6187ef27484bd8bf44c4b4a9ec304d362c5947db331f0fde74cee4dc351351877

  • SSDEEP

    12288:DFdIJTu8vzHunn+f0c9R2dvJNRMXRQuIe6/P3N8AbfdmaMx:DFdIJTP7Hin+f03vJNIRIe6/fN8WfdFs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 37a0b78e19c25f27df230a7b90971db0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:5 windows x86 arch:x86

    17ea51acf0005f354251d1882460a13c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISpcre.dll
    .dll windows:4 windows x86 arch:x86

    3efd46aba10b2e88f0bd15c6467e81ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc_n.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nxs.dll
    .dll windows:4 windows x86 arch:x86

    fd495db6c916b55c715b6e970a4627e1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_73_/$_73_.zip
    .zip
  • $TEMP/$_73_/ext.doc
    .exe windows:4 windows x86 arch:x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections