Overview

overview

7

Static

static

3

3e513ec14a...18.exe

windows7-x64

7

3e513ec14a...18.exe

windows10-2004-x64

7

$1/$APPDAT...er.exe

windows7-x64

7

$1/$APPDAT...er.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$1/MediaPl...on.exe

windows7-x64

1

$1/MediaPl...on.exe

windows10-2004-x64

1

$1/MediaPl...ff.exe

windows7-x64

1

$1/MediaPl...ff.exe

windows10-2004-x64

1

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/mplayerc.exe

windows7-x64

1

$R1/mplayerc.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e513ec14a03016fcf4f877bf4827701_JaffaCakes118

  • Size

    2.2MB

  • MD5

    3e513ec14a03016fcf4f877bf4827701

  • SHA1

    4a023d833bbac2ae39f26430eba60f84d86738f4

  • SHA256

    61300c1151750e9395f217fdc7d5eb4360da9ec3ff23b9fc51b7a11e6187950d

  • SHA512

    2bf3a75c3a441737f464128120b3659619a5219ed7249d6c1f63bc5b14efdb4713fae6d977fab05e3fc954960af5408fe1181315c59bc512da7d3bdde523f7a5

  • SSDEEP

    49152:CgWFAS1CetCGJTt2MOSzSAUXMQU2NjXJw0FmWYSx4SJvJ7ZRLeduq:ut1T9t2MOSfmMLWjXJw0FmWYQvJtgduq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e513ec14a03016fcf4f877bf4827701_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $1/$APPDATA/MediaPlayerApplication2/uninstaller.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $1/MediaPlayerApplication.exe
    .exe windows:5 windows x86 arch:x86

    5a0268f906bd2e03361fb9ac06c7c894


    Headers

    Imports

    Sections

  • $1/MediaPlayerInstallerStuff.exe
    .exe windows:6 windows x86 arch:x86

    84a2530b5a5345adb8d4094d644cdeee


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/mplayerc.exe
    .exe windows:5 windows x86 arch:x86

    d90a3033d76f73239d1a252247da3424


    Headers

    Imports

    Sections