Overview

overview

10

Static

static

3

70d56fc02f...18.exe

windows7-x64

10

70d56fc02f...18.exe

windows10-2004-x64

8

$PLUGINSDI...bN.dll

windows7-x64

1

$PLUGINSDI...bN.dll

windows10-2004-x64

1

$PLUGINSDI...jj.dll

windows7-x64

1

$PLUGINSDI...jj.dll

windows10-2004-x64

1

$PLUGINSDI...ye.dll

windows7-x64

1

$PLUGINSDI...ye.dll

windows10-2004-x64

1

$TEMP/ejrURMkKbyI.js

windows7-x64

3

$TEMP/ejrURMkKbyI.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    70d56fc02f1261c03e07bd5ef61c5ea4_JaffaCakes118

  • Size

    6.6MB

  • MD5

    70d56fc02f1261c03e07bd5ef61c5ea4

  • SHA1

    4eaff05959fd960abfc481829c4b0711d0a6320c

  • SHA256

    d154c46ff2e3848e9c75b986cd0e8dc57f49673ab8dd314f6529dba72fa5c194

  • SHA512

    5aa3878aa997522ea9e1f4daad0ee95807026a92a26912fc27e8e95810637ed9867d56703bda1afda6af6b66bc4bba95164ecfd0ee5f77cb9df8f5183f638e0e

  • SSDEEP

    196608:01QojRR+hOxKjJ/69ndm59xj+zsZKQM6zZDiUyt:cYg29UQJYv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 70d56fc02f1261c03e07bd5ef61c5ea4_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    ed8375c88e76a1c84a0e0edcf922e78a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NJaFfZKlVbN.dll
    .dll windows:5 windows x86 arch:x86

    8c73a005fc309cc0d77173ba799953c0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nMIAnjbTcjj.dll
    .dll windows:5 windows x86 arch:x86

    03e25545f353744c46f43a2161ce923e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nay.wav
  • $PLUGINSDIR/uokFCXyLmye.dll
    .dll windows:5 windows x86 arch:x86

    037977e1f3ac47eafe6c718653885cf3


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ejrURMkKbyI.js
    .js