Overview

overview

7

Static

static

3

639b08f118...18.exe

windows7-x64

7

639b08f118...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI..._n.dll

windows7-x64

3

$PLUGINSDI..._n.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nxs.dll

windows7-x64

1

$PLUGINSDIR/nxs.dll

windows10-2004-x64

1

$TEMP/$_73_/ext.exe

windows7-x64

1

$TEMP/$_73_/ext.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    639b08f1189a4d4ef841a5182ddadd19_JaffaCakes118

  • Size

    569KB

  • MD5

    639b08f1189a4d4ef841a5182ddadd19

  • SHA1

    4ed1652a57f4f31fe81666dd57b49984bce14aa4

  • SHA256

    f1416fdec43d4faefe704e392a2a35f79a924edc499857f2148de8d3b41cc4a4

  • SHA512

    ff866a06ec61127d9906720022d791f5e6b6fab839a465698d0afd8bdfaa18ef204f05fe40005416bbcb881381f345ba53c0a8e7c448b62c88cb82d94ebb46b8

  • SSDEEP

    12288:DdhXPOrqHajpLfaD1Xf6Qe472ExgS8F1pAR/qC1thX2rno66:DdhXm+6dORXXe9F1oDthX/66

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 639b08f1189a4d4ef841a5182ddadd19_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:5 windows x86 arch:x86

    17ea51acf0005f354251d1882460a13c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISpcre.dll
    .dll windows:4 windows x86 arch:x86

    3efd46aba10b2e88f0bd15c6467e81ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc_n.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nxs.dll
    .dll windows:4 windows x86 arch:x86

    fd495db6c916b55c715b6e970a4627e1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_73_/$_73_.zip
    .zip
  • $TEMP/$_73_/ext.doc
    .exe windows:4 windows x86 arch:x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections