Overview

overview

10

Static

static

3

71fef8e694...18.exe

windows7-x64

10

71fef8e694...18.exe

windows10-2004-x64

10

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

NsResize.dll

windows7-x64

1

NsResize.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71fef8e6944f516de0b5f001804d0125_JaffaCakes118

  • Size

    243KB

  • MD5

    71fef8e6944f516de0b5f001804d0125

  • SHA1

    c29db1c7dca8ba469f7755a72d6fe4331011aa1e

  • SHA256

    adac4ae228d5d9697825ee08a31d125b91a4539f3cff25e68ae3c8e1a70c34f5

  • SHA512

    272887eceb0112639516cb785d1f2ce89646be2e6a455de30be758baadc754aa0f20d6c2346f4f2a0503d26018391dd5ff650bf45874b8baf25d195f0d64cd4d

  • SSDEEP

    6144:MkyacpfMzk1+nQFGbjVXgyLB5NaLVtju0r0/fk4Xc/Be1H2E:MkyfYk4nXbjVLLBGLVtjuf/fk40Q1H2E

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 71fef8e6944f516de0b5f001804d0125_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7ed0d71376e55d58ab36dc7d3ffda898


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Betatron.A
  • Chanson.c
  • NsResize.dll
    .dll windows:4 windows x86 arch:x86

    0300fc643126f5f006ee2032a7f6c070


    Headers

    Imports

    Sections

  • forward_disabled.png
    .png