Overview

overview

7

Static

static

3

DataKursHi...ma.exe

windows7-x64

7

DataKursHi...ma.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

DataKursHi...ro.exe

windows7-x64

1

DataKursHi...ro.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/...as.exe

windows7-x64

1

fscommand/...as.exe

windows10-2004-x64

1

fscommand/Aeod1as.exe

windows7-x64

1

fscommand/Aeod1as.exe

windows10-2004-x64

1

fscommand/Aeod2as.exe

windows7-x64

1

fscommand/Aeod2as.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    721e92949040546be6901fff18bcd240_JaffaCakes118

  • Size

    6.7MB

  • MD5

    721e92949040546be6901fff18bcd240

  • SHA1

    f5c10b1ba5db0359b712b3ea2f00fca14233a7e8

  • SHA256

    6593b6050d4e271b4a06d5f9928b016664d3eef4d2738d54ba18db6da9c1f629

  • SHA512

    71d54999c7e993d75fcc9e7e619f544fef42c49446968c1d4ba4ce759b7aba2edeae7d82153d6888121448471b6b5cdd8bccf6e4dcac7aa93d04b13c7222875b

  • SSDEEP

    196608:VcmuMHbepvZ7jD0K3uwlgKL8MZZFTt4KLEae3:VcmuMHbKR7vuwlgKL8MZZlt4KLEaw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 721e92949040546be6901fff18bcd240_JaffaCakes118
    .zip
  • DataKursHizliOkuma.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • BeniOku.txt
  • DataKursHizliOkumaPro.exe
    .exe windows:5 windows x86 arch:x86

    d120a12a19523bf42b05cb9315741008


    Headers

    Imports

    Exports

    Sections

  • fscommand/Aeod10as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod11as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod12as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod13as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod14as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod15as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod16as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod17as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod1as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod2as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod3as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod4as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod5as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod6as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod7as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod8as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/Aeod9as.exe
    .exe windows:4 windows x86 arch:x86

    1e29285fdb2e0bc94261e0569a8f8692


    Headers

    Imports

    Sections

  • fscommand/directory.exe
    .exe windows:4 windows x86 arch:x86

    616bb4519d551819a14f48f66930b6c3


    Headers

    Imports

    Sections

  • fscommand/yazilar/Ali Baba ve Krk Haramiler.txt
  • fscommand/yazilar/Altn Bukle ve  Ayck.txt
  • fscommand/yazilar/Asla Yalan Syleme.txt
  • fscommand/yazilar/Baba Ko ile Kzl Kurt .txt
  • fscommand/yazilar/Basari ve Degerler.txt
  • fscommand/yazilar/Ben Aslnda Bir Devim.txt
  • fscommand/yazilar/Cceler ve Ayakkabc.txt
  • fscommand/yazilar/Dnyann En Gzel iei.txt
  • fscommand/yazilar/Elma Aac ve ifti Masal.txt
  • fscommand/yazilar/Gzel ve irkin.txt
  • fscommand/yazilar/Karlar Kraliesi.txt
  • fscommand/yazilar/Kedi ve Fare.txt
  • fscommand/yazilar/Kibriti Kz.txt
  • fscommand/yazilar/Kurun Asker.txt
  • fscommand/yazilar/Krmz Balkl Kz.txt
  • fscommand/yazilar/Limon Aac.txt
  • fscommand/yazilar/Oduncunun Talihi.txt
  • fscommand/yazilar/PLATON-MEKTUPLAR.txt
  • fscommand/yazilar/Papatya Masal.txt
  • fscommand/yazilar/Pinokyo.txt
  • fscommand/yazilar/Sihirli Fasulye.txt
  • fscommand/yazilar/Uan Sandk.txt
  • fscommand/yazilar/Yalanc oban.txt
  • fscommand/yazilar/iki inat Kei.txt
  • fscommand/yazilar/izmeli Kedi.txt
  • fscommand/yazilar/ampiyon rdek.txt
  • fscommand/yazilar/ehit Hikayesi-Ban Vermeyen ehit.txt
  • temp/Xyeni1.txt
  • temp/Xyeni10.txt
  • temp/Xyeni2.txt
  • temp/Xyeni3.txt
  • temp/Xyeni4.txt
  • temp/Xyeni5.txt
  • temp/Xyeni6.txt
  • temp/Xyeni7.txt
  • temp/Xyeni8.txt
  • temp/Xyeni9.txt
  • temp/XyeniText.txt
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections