Overview

overview

7

Static

static

3

846328c964...18.exe

windows7-x64

7

846328c964...18.exe

windows10-2004-x64

7

$1/$APPDAT...er.exe

windows7-x64

7

$1/$APPDAT...er.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$1/MediaPl...on.exe

windows7-x64

1

$1/MediaPl...on.exe

windows10-2004-x64

1

$1/MediaPl...ff.exe

windows7-x64

1

$1/MediaPl...ff.exe

windows10-2004-x64

1

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/mplayerc.exe

windows7-x64

1

$R1/mplayerc.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    846328c9641705a25e245812690346b7_JaffaCakes118

  • Size

    2.2MB

  • MD5

    846328c9641705a25e245812690346b7

  • SHA1

    9c512753df6d03547d668e995914b09a14e06d52

  • SHA256

    a6fbbdfd4727a94119a43866f2997b8b0b319a391bab2830d8a217517f882196

  • SHA512

    d04edf39b9918aef444f333b60692dd0d6e6a8451a9e0f9f0084552b2bfacbcee9ecf1d2a9bf54156f6ecf6f3f70807f6e9e79e967e25ec010d8529ca12ea4b3

  • SSDEEP

    49152:CgWFAS1CetCGJTt2MOSzSAUXMQU2NjXJw0FmWYSx4SJvJ7ZRLeduQ:ut1T9t2MOSfmMLWjXJw0FmWYQvJtgduQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 846328c9641705a25e245812690346b7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $1/$APPDATA/MediaPlayerApplication2/uninstaller.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $1/MediaPlayerApplication.exe
    .exe windows:5 windows x86 arch:x86

    5a0268f906bd2e03361fb9ac06c7c894


    Headers

    Imports

    Sections

  • $1/MediaPlayerInstallerStuff.exe
    .exe windows:6 windows x86 arch:x86

    84a2530b5a5345adb8d4094d644cdeee


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/mplayerc.exe
    .exe windows:5 windows x86 arch:x86

    d90a3033d76f73239d1a252247da3424


    Headers

    Imports

    Sections