Overview

overview

10

Static

static

3

6d2252d1f8...18.exe

windows7-x64

10

6d2252d1f8...18.exe

windows10-2004-x64

8

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...st.dll

windows7-x64

1

$PLUGINSDI...st.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/brh.dll

windows7-x64

1

$PLUGINSDIR/brh.dll

windows10-2004-x64

1

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$TEMP/$_144_.exe

windows7-x64

7

$TEMP/$_144_.exe

windows10-2004-x64

7

$TEMP/$_1750_.exe

windows7-x64

7

$TEMP/$_1750_.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d2252d1f81e4a89059e7fbf6d4d0ecf_JaffaCakes118

  • Size

    8.8MB

  • MD5

    6d2252d1f81e4a89059e7fbf6d4d0ecf

  • SHA1

    fd182a7b2236b0bf447ac940d26b230fc75c54f3

  • SHA256

    a52ba33e7b386e933d1a6ae99f257315935d4c68cd21f91e987d327683f9c990

  • SHA512

    cfa5ead005026c01a3a72eca8d1a50ccce02283146f6e6ba99945d3e25879b7314a392cb342e8018b860b16dc10ff6db08168815a4fad84a49f9cb43f4676871

  • SSDEEP

    196608:EwWfZ4PDKMxSIFQColSp5oNeW7f9VBQWwigouggCJEmvPjUide:1WfZ47X4QolSXglfiouggC2m4D

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 6d2252d1f81e4a89059e7fbf6d4d0ecf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    01d106fd6b60d71fb22bfc025916871f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISList.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/brh.dll
    .dll windows:6 windows x86 arch:x86

    046bbd9849a99f6348759cf751c89c59


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    2e4d94706c699d2da474aa823430b9a5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_144_
    .exe windows:5 windows x86 arch:x86

    bcd55da39f93235c079ebcd32dccd879


    Headers

    Imports

    Sections

  • X
  • $TEMP/$_1744_.ico
  • $TEMP/$_1750_
    .exe windows:5 windows x86 arch:x86

    bcd55da39f93235c079ebcd32dccd879


    Headers

    Imports

    Sections

  • X
  • $_151_/$_151_/$_153_.ico