Overview
overview
7Static
static
3801a4f056d...18.exe
windows7-x64
7801a4f056d...18.exe
windows10-2004-x64
7$PLUGINSDI...64.dll
windows7-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDIR/Inetc.dll
windows7-x64
3$PLUGINSDIR/Inetc.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7General
-
Target
801a4f056d29a807f1702df96e936150_JaffaCakes118
-
Size
171KB
-
Sample
240529-kc625sgf2s
-
MD5
801a4f056d29a807f1702df96e936150
-
SHA1
07c760cb9dee8405334be0c108322cd4da70290a
-
SHA256
e1c6f680182e28b958cef4f806754994d468b3f5d8cb82c940c4a44c87072969
-
SHA512
581d4d5f7f3369595b20670481784716b1f9fdc1bf79167e2a16db36c99cc1d87bb79bda5f888af2df0fe2ac70866c5e788012ba1b5ecfacd1a4bb4a8d988e58
-
SSDEEP
3072:f3c1fP4AJJthccNcpucuCr1EwyFdXI8iMorwG7oN7jE1Tmlqd8ZYH:/OPjjccNcbpr1KFtkMtG8N7jQQy
Static task
static1
Behavioral task
behavioral1
Sample
801a4f056d29a807f1702df96e936150_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
801a4f056d29a807f1702df96e936150_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Base64.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Base64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/Inetc.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/Inetc.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
uninst.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
uninst.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
801a4f056d29a807f1702df96e936150_JaffaCakes118
-
Size
171KB
-
MD5
801a4f056d29a807f1702df96e936150
-
SHA1
07c760cb9dee8405334be0c108322cd4da70290a
-
SHA256
e1c6f680182e28b958cef4f806754994d468b3f5d8cb82c940c4a44c87072969
-
SHA512
581d4d5f7f3369595b20670481784716b1f9fdc1bf79167e2a16db36c99cc1d87bb79bda5f888af2df0fe2ac70866c5e788012ba1b5ecfacd1a4bb4a8d988e58
-
SSDEEP
3072:f3c1fP4AJJthccNcpucuCr1EwyFdXI8iMorwG7oN7jE1Tmlqd8ZYH:/OPjjccNcbpr1KFtkMtG8N7jQQy
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/Base64.dll
-
Size
4KB
-
MD5
f0e3845fefd227d7f1101850410ec849
-
SHA1
3067203fafd4237be0c186ddab7029dfcbdfb53e
-
SHA256
7c688940e73022bf526f07cc922a631a1b1db78a19439af6bafbff2a3b46d554
-
SHA512
584ae5a0d1c1639ba4e2187d0c8a0ac7e54c0be0a266029c4689d81c0c64a7f80e7d918da0df5c6344f9f7a114f30d8f2feda253b29e813bae086604731a3d8a
-
SSDEEP
48:SxSrr7xd14m4bLKwvnvcfDw1hEiauGkDVK+hIg4qT9/3lt:zr7xd14m4qw/vGwrEickDVthcE/
Score3/10 -
-
-
Target
$PLUGINSDIR/BrandingURL.dll
-
Size
4KB
-
MD5
71c46b663baa92ad941388d082af97e7
-
SHA1
5a9fcce065366a526d75cc5ded9aade7cadd6421
-
SHA256
bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
-
SHA512
5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
Score3/10 -
-
-
Target
$PLUGINSDIR/Inetc.dll
-
Size
20KB
-
MD5
50fdadda3e993688401f6f1108fabdb4
-
SHA1
04a9ae55d0fb726be49809582cea41d75bf22a9a
-
SHA256
6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
-
SHA512
e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
-
SSDEEP
384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781
-
SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f
-
SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
-
SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
-
SSDEEP
192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
254f13dfd61c5b7d2119eb2550491e1d
-
SHA1
5083f6804ee3475f3698ab9e68611b0128e22fd6
-
SHA256
fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28
-
SHA512
fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7
-
SSDEEP
192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
00a0194c20ee912257df53bfe258ee4a
-
SHA1
d7b4e319bc5119024690dc8230b9cc919b1b86b2
-
SHA256
dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
-
SHA512
3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/ZipDLL.dll
-
Size
163KB
-
MD5
2dc35ddcabcb2b24919b9afae4ec3091
-
SHA1
9eeed33c3abc656353a7ebd1c66af38cccadd939
-
SHA256
6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1
-
SHA512
0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901
-
SSDEEP
3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk
Score3/10 -
-
-
Target
uninst.exe
-
Size
54KB
-
MD5
2016ecebfa8e173999b4b4f7d9365669
-
SHA1
094e37c764c1c3662fb7c49747a6387314d3a4f0
-
SHA256
8317f85a4c7aae18b66bed7caf8808ba672967878ffca5c15e7a279ca995e2ed
-
SHA512
8e186834dff1b48a3c94c229de64d34eff1904d974ea9d086ab5b413a043e0a3391146c8657eae016a1f98520a0d6893a3a575d6a161c3cf6248776ad1a3e307
-
SSDEEP
1536:f3cpyORJLuB4P4AJJSgTccNcDLrAyNZGrt:f3c1fP4AJJSgccNcvrAhh
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-