Overview

overview

7

Static

static

3

6554571360...18.exe

windows7-x64

7

6554571360...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

bin/FAXVIEW.exe

windows7-x64

1

bin/FAXVIEW.exe

windows10-2004-x64

1

bin/MFC42.dll

windows7-x64

1

bin/MFC42.dll

windows10-2004-x64

1

bin/MSVCRT.dll

windows7-x64

3

bin/MSVCRT.dll

windows10-2004-x64

3

bin/Usr.dll

windows7-x64

3

bin/Usr.dll

windows10-2004-x64

3

bin/XFAX.exe

windows7-x64

1

bin/XFAX.exe

windows10-2004-x64

1

bin/XOUT.exe

windows7-x64

1

bin/XOUT.exe

windows10-2004-x64

1

bin/setp.exe

windows7-x64

1

bin/setp.exe

windows10-2004-x64

1

bin/xMsx.exe

windows7-x64

1

bin/xMsx.exe

windows10-2004-x64

1

bin/xMsx2.exe

windows7-x64

1

bin/xMsx2.exe

windows10-2004-x64

1

bin/xPrn.exe

windows7-x64

1

bin/xPrn.exe

windows10-2004-x64

1

bin/xScan.exe

windows7-x64

1

bin/xScan.exe

windows10-2004-x64

1

drvw7/AddPort.exe

windows7-x64

1

drvw7/AddPort.exe

windows10-2004-x64

1

drvw7/FaxD...ap.dll

windows7-x64

1

drvw7/FaxD...ap.dll

windows10-2004-x64

1

drvw7/FaxD...ap.dll

windows7-x64

1

drvw7/FaxD...ap.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6554571360f8c1385fb246d9e2845c2c_JaffaCakes118

  • Size

    1013KB

  • MD5

    6554571360f8c1385fb246d9e2845c2c

  • SHA1

    25908f7c8f962f8cd0bbb322dfa86bbbe5b979f4

  • SHA256

    1d14500a00d5f63a796ae8002eaacb21ee3feb348ab52f3d74c85c0f914347c5

  • SHA512

    8fa9155d6e7b065cdcdb72399c521a278da447994c583f3e349238bea53a5aebc014cdfee2f35f8ed59bd6d55d84cb9ad407044f0d8a7b1c2a550c07a78dbb7a

  • SSDEEP

    24576:dUx3bdywNuJA0g/2i4FmwKGpsAqCwoMZeZCkbx+HHP4V:dU3yiuePui4ItGpsAqC28gkbQHC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 6554571360f8c1385fb246d9e2845c2c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bin/FAXVIEW.EXE
    .exe windows:4 windows x86 arch:x86

    0a6bc9b1abc6bb7044e3167c57d63146


    Headers

    Imports

    Sections

  • bin/MFC42.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a1581f1284d59a8a21a8782a38a2fea1


    Headers

    Imports

    Exports

    Sections

  • bin/MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • bin/Usr.dll
    .dll windows:4 windows x86 arch:x86

    1e59a43510755bf4d17e8ba28def877d


    Headers

    Imports

    Exports

    Sections

  • bin/XFAX.EXE
    .exe windows:4 windows x86 arch:x86

    53ed13f6f76ffc9956527d6bf370e75e


    Headers

    Imports

    Sections

  • bin/XOUT.EXE
    .exe windows:4 windows x86 arch:x86

    d87275d5526d9be31101efa9507af999


    Headers

    Imports

    Sections

  • bin/setp.exe
    .exe windows:4 windows x86 arch:x86

    e6acbecb3d36515f60078f6962f8e96d


    Headers

    Imports

    Sections

  • bin/xMsx.exe
    .exe windows:4 windows x86 arch:x86

    aeaadd27e9e20a95b0e32825de53bf31


    Headers

    Imports

    Sections

  • bin/xMsx2.exe
    .exe windows:4 windows x86 arch:x86

    5da5db430b634abce690a8ef68c18cbd


    Headers

    Imports

    Sections

  • bin/xPrn.exe
    .exe windows:4 windows x86 arch:x86

    e53f1236f41133150ffb0e9d273c9f74


    Headers

    Imports

    Sections

  • bin/xScan.exe
    .exe windows:4 windows x86 arch:x86

    9b6e1160980fa1817c209daab79e6721


    Headers

    Imports

    Sections

  • db/CODE.INI
  • db/DATAID.DAT
  • db/GRPID.DAT
  • db/JOB.db
  • db/JOBID.DAT
  • db/LNKID.DAT
  • db/QUE.db
  • db/QUEID.DAT
  • db/SCANNER.INI
  • db/SYS.db
  • db/SYSINFO.DB
  • db/TEMPID.DAT
  • db/UPDATE.DAT
  • db/USRID.DAT
  • db/_system_/LOGIN.db
  • db/_system_/SCANNER.INI
  • db/_system_/editor.ini
  • db/_system_/grp.db
  • db/_system_/info.db
  • db/_system_/lnk.db
  • db/_system_/usr.db
  • db/bossID.dat
  • db/dd.txt
  • db/info.db
  • db/loginID.dat
  • db/que01.db
  • db/que02.db
  • db/que03.db
  • db/que04.db
  • db/que05.db
  • db/que06.db
  • db/que07.db
  • db/que08.db
  • db/que09.db
  • db/que10.db
  • db/que11.db
  • db/que12.db
  • db/que13.db
  • db/que14.db
  • db/que15.db
  • db/que16.db
  • db/que17.db
  • db/que18.db
  • db/que19.db
  • db/que20.db
  • db/que21.db
  • db/que22.db
  • db/que23.db
  • db/que24.db
  • db/que25.db
  • db/que26.db
  • db/que27.db
  • db/que28.db
  • db/que29.db
  • db/que30.db
  • db/que31.db
  • doc/TEMP.DAT
  • drvw7/AddPort.exe
    .exe windows:5 windows x86 arch:x86

    b88b8a03daf7c86a3350036af74c3c17


    Headers

    Imports

    Sections

  • drvw7/FaxDriver/AMD64/ifax_bitmap.dll
    .dll windows:6 windows x64 arch:x64

    99daf4623f419b215ca2c7ba09ef4ccf


    Headers

    Imports

    Exports

    Sections

  • drvw7/FaxDriver/IA64/ifax_bitmap.dll
  • drvw7/FaxDriver/STDNAMES.GPD
  • drvw7/FaxDriver/i386/ifax_bitmap.dll
    .dll windows:6 windows x86 arch:x86

    74db2629b0bf6511946d9243af6fff5f


    Headers

    Imports

    Exports

    Sections

  • drvw7/FaxDriver/ifax_bitmap.gpd
  • drvw7/FaxDriver/ifax_bitmap1.gpd
  • drvw7/FaxDriver/x86/ifax_bitmap.dll
    .dll windows:6 windows x86 arch:x86

    74db2629b0bf6511946d9243af6fff5f


    Headers

    Imports

    Exports

    Sections

  • drvw7/STDNAMES.GPD
  • drvw7/StrongFax.inf
  • drvw7/StrongFax.ini
  • drvw7/ifax_bitmap.gpd
  • drvw7/ifax_bitmap1.gpd
  • temp/TEMP.DAT
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • win/xDx.exe
    .exe windows:4 windows x86 arch:x86

    130f452898ca48acf6b1e1fee7d9b1b0


    Headers

    Imports

    Sections

  • win/xTwn.exe
    .exe windows:4 windows x86 arch:x86

    3ec8eb4c092e65462b73b3123293cd23


    Headers

    Imports

    Sections