Overview

overview

7

Static

static

3

RedButton.exe

windows7-x64

7

RedButton.exe

windows10-2004-x64

7

$DESKTOP/O...ft.url

windows7-x64

6

$DESKTOP/O...ft.url

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$SMPROGRAM...ft.url

windows7-x64

6

$SMPROGRAM...ft.url

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

dskclr.dll

windows7-x64

4

dskclr.dll

windows10-2004-x64

4

oscps.dll

windows7-x64

4

oscps.dll

windows10-2004-x64

1

redbutton.exe

windows7-x64

1

redbutton.exe

windows10-2004-x64

1

regclr.dll

windows7-x64

4

regclr.dll

windows10-2004-x64

1

tweaks.dll

windows7-x64

4

tweaks.dll

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7faac9dd6e62ea9dea7eaf7e53ad0095_JaffaCakes118

  • Size

    382KB

  • MD5

    7faac9dd6e62ea9dea7eaf7e53ad0095

  • SHA1

    13f844edf15581e316dbce8b96ff89d28b576efa

  • SHA256

    621016df8128bb8db8c068ac97195e6ea7456d22aecb94c5254fd667d76dd7ea

  • SHA512

    f65786a43e4902a626be12bc94ff5754adc0f7074c7fde9cceefaf7d00243b215527d4fa1d2ffb62dc0e20b2343f532e20fab6b3fd3626c0a0f89b297e5317a3

  • SSDEEP

    6144:+inpWZwzM/EZpEopb4SX77NnSUHoBbHEDN9wIn5zB8j3FZVbnP69B9FrNcmR6W7N:+4WB/c2Ab4SrJn02DN9Xn0j3FZVbnGBf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 7faac9dd6e62ea9dea7eaf7e53ad0095_JaffaCakes118
    .zip
  • RedButton.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $DESKTOP/OnLiveSoft.url
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMPROGRAMS/OnLiveSoft.url
  • English.lng
  • Russian.lng
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • dskclr.dll
    .dll windows:5 windows x86 arch:x86

    b20b1b2610ad6c09f5076db8effd1e83


    Headers

    Imports

    Exports

    Sections

  • license_eng.txt
  • license_rus.txt
  • oscps.dll
    .dll windows:5 windows x86 arch:x86

    178a4a8fde938df657d0a2d71c3e7e9c


    Headers

    Imports

    Exports

    Sections

  • redbutton.exe
    .exe windows:5 windows x86 arch:x86

    77ab38dfac21a212f013334e11b4c8ca


    Headers

    Imports

    Sections

  • regclr.dll
    .dll windows:5 windows x86 arch:x86

    21f753cf3ed319091757995cc6764c0e


    Headers

    Imports

    Exports

    Sections

  • tweaks.dll
    .dll windows:5 windows x86 arch:x86

    9b7a6731c4399147b556acefebe2ac21


    Headers

    Imports

    Exports

    Sections