Overview

overview

7

Static

static

3

611571db8e...18.exe

windows7-x64

7

611571db8e...18.exe

windows10-2004-x64

7

$1/$APPDAT...er.exe

windows7-x64

7

$1/$APPDAT...er.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$1/MediaPl...on.exe

windows7-x64

1

$1/MediaPl...on.exe

windows10-2004-x64

1

$1/MediaPl...ff.exe

windows7-x64

1

$1/MediaPl...ff.exe

windows10-2004-x64

1

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/mplayerc.exe

windows7-x64

1

$R1/mplayerc.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    611571db8e02f8317a116b5bfe5861c7_JaffaCakes118

  • Size

    2.2MB

  • MD5

    611571db8e02f8317a116b5bfe5861c7

  • SHA1

    11cc6201f31ee652adeba6b27cfde5289075889b

  • SHA256

    53a9c69b29b17f85bfa2ef9e1f09f3e8cd3ccb0d489baba56ec0eecb6e37bce2

  • SHA512

    02783e0d6f88133d06d8c279047d92278cc46aa6bd4ae2976c6c8c6bdb545ecfbdca75a0b34f062c8306be6c15a334e7d290c035d7b5a33422834211e6b4a949

  • SSDEEP

    49152:CgWFAS1CetCGJTt2MOSzSAUXMQU2NjXJw0FmWYSx4SJvJ7ZRLeduU:ut1T9t2MOSfmMLWjXJw0FmWYQvJtgduU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 611571db8e02f8317a116b5bfe5861c7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $1/$APPDATA/MediaPlayerApplication2/uninstaller.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $1/MediaPlayerApplication.exe
    .exe windows:5 windows x86 arch:x86

    5a0268f906bd2e03361fb9ac06c7c894


    Headers

    Imports

    Sections

  • $1/MediaPlayerInstallerStuff.exe
    .exe windows:6 windows x86 arch:x86

    84a2530b5a5345adb8d4094d644cdeee


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/mplayerc.exe
    .exe windows:5 windows x86 arch:x86

    d90a3033d76f73239d1a252247da3424


    Headers

    Imports

    Sections