General

  • Target

    b1203983f8c428cc85a815fb175eacce_JaffaCakes118

  • Size

    5.1MB

  • MD5

    b1203983f8c428cc85a815fb175eacce

  • SHA1

    83600a5f0603aaf226e01a5a126de3464da2af4c

  • SHA256

    3dfa964a1885365a7ead7bec7c8c643af64aabe34a3393d2d12692fd872ff369

  • SHA512

    6c1b6426dfdb698e3af971abc59983d2e0f9d6a733b340fa91b3a1e6560e8f329b6361868eaa57092dd129c43bb49ffe40ed7fdbd11e374d7f532986febdbb4b

  • SSDEEP

    98304:qGINSlxGsV/iklr0r5H+2pbf1xu2l0oEpE9pQKMcL/gEM7VaXZMUwjg:QSlxGs29VpHu2GDE/NT4tcMU6g

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://sepogy.epiain.com/v2/loader.dll

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • b1203983f8c428cc85a815fb175eacce_JaffaCakes118
    .zip
  • ReF4784752863741938.lnk
    .lnk
  • dll32_dec.dll
    .dll windows:4 windows x86 arch:x86

    de069aca9775f8aacc06b1646a9c5985


    Headers

    Imports

    Exports

    Sections

  • dll64_dec.dll
    .dll windows:4 windows x64 arch:x64

    45435b4b8add0c16efb468ee7641c5a8


    Headers

    Imports

    Exports

    Sections

  • dllb.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    8e9dbf2e3e261fcd98d54e135dbc8b30


    Headers

    Imports

    Exports

    Sections

  • script
    .ps1