Overview

overview

3

Static

static

3

b172472129...18.exe

windows7-x64

3

b172472129...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

7-zip.chm

windows7-x64

1

7-zip.chm

windows10-2004-x64

1

7-zip.dll

windows7-x64

1

7-zip.dll

windows10-2004-x64

1

7z.exe

windows7-x64

1

7z.exe

windows10-2004-x64

1

7z.exe

windows7-x64

1

7z.exe

windows10-2004-x64

1

7zCon.exe

windows7-x64

1

7zCon.exe

windows10-2004-x64

1

7zFM.exe

windows7-x64

3

7zFM.exe

windows10-2004-x64

3

7zG.exe

windows7-x64

1

7zG.exe

windows10-2004-x64

1

Codecs/7zAES.dll

windows7-x64

1

Codecs/7zAES.dll

windows10-2004-x64

1

Codecs/AES.dll

windows7-x64

1

Codecs/AES.dll

windows10-2004-x64

3

Codecs/BZip2.dll

windows7-x64

1

Codecs/BZip2.dll

windows10-2004-x64

1

Codecs/Branch.dll

windows7-x64

1

Codecs/Branch.dll

windows10-2004-x64

1

Codecs/Copy.dll

windows7-x64

1

Codecs/Copy.dll

windows10-2004-x64

1

Codecs/Deflate.dll

windows7-x64

1

Codecs/Deflate.dll

windows10-2004-x64

3

Codecs/LZMA.dll

windows7-x64

1

Codecs/LZMA.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b172472129aa2ef16023c175a5d36b88_JaffaCakes118

  • Size

    815KB

  • MD5

    b172472129aa2ef16023c175a5d36b88

  • SHA1

    415c0ad4cbabd1998bd35f4e4592471a2eac7adb

  • SHA256

    a5ae23fbd85ebe9fa7919b0889ec6c9a990676dbd4af1331835effbd45e56836

  • SHA512

    0b68db60f2dbfd5f352bc77e6758cf4cea0073ff04de8056d285a0cd8ab1022864f0f46a12e180067a1f6e721eaf1c7f906ea1189cc5ea566e0bbbbce17321c2

  • SSDEEP

    24576:rvD/3OB56nyhXflnkC6py78z4QDTNw9LE:HvOunGXfez4QPq9LE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 35 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • b172472129aa2ef16023c175a5d36b88_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    18b26e3ef7317852fa83fde4ebd910ac


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 7-zip.chm
    .chm
  • 7-zip.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5de0c6c9050086c8ac16902529b36a51


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    3074545734c15cbda066b116d97f3be2


    Headers

    Imports

    Sections

  • 7z.sfx
    .exe windows:4 windows x86 arch:x86

    0b082736325ac4862e18c7208cc3113e


    Headers

    Imports

    Sections

  • 7zCon.sfx
    .exe windows:4 windows x86 arch:x86

    53ed9fede048a33f0081c2f80f8de7fd


    Headers

    Imports

    Sections

  • 7zFM.exe
    .exe windows:4 windows x86 arch:x86

    9c6fe9bf53551bd41c2fb36d5bb07c14


    Headers

    Imports

    Sections

  • 7zG.exe
    .exe windows:4 windows x86 arch:x86

    68189aa2840f79e8b2f239466adac3a0


    Headers

    Imports

    Sections

  • 7zip_pad.xml
    .xml
  • Codecs/7zAES.dll
    .dll windows:4 windows x86 arch:x86

    00d4dcd23c883cc6131ac9094724e379


    Headers

    Imports

    Exports

    Sections

  • Codecs/AES.dll
    .dll windows:4 windows x86 arch:x86

    09ca16fb8de6280b24a946a48282853e


    Headers

    Imports

    Exports

    Sections

  • Codecs/BZip2.dll
    .dll windows:4 windows x86 arch:x86

    5edcd3f7a87207b82703f61ab5b9ec9b


    Headers

    Imports

    Exports

    Sections

  • Codecs/Branch.dll
    .dll windows:4 windows x86 arch:x86

    fbf08d7c65f841d869bd1f5cb86e0269


    Headers

    Imports

    Exports

    Sections

  • Codecs/Copy.dll
    .dll windows:4 windows x86 arch:x86

    51227e654f29c0b4af334313aab5d163


    Headers

    Imports

    Exports

    Sections

  • Codecs/Deflate.dll
    .dll windows:4 windows x86 arch:x86

    bc1aa2b47a37abc56b43e4b259684304


    Headers

    Imports

    Exports

    Sections

  • Codecs/LZMA.dll
    .dll windows:4 windows x86 arch:x86

    5bb3ca946af020edb4a79ba204d4756f


    Headers

    Imports

    Exports

    Sections

  • Codecs/PPMd.dll
    .dll windows:4 windows x86 arch:x86

    18c0812f33c8112d8f7ccd2704604e13


    Headers

    Imports

    Exports

    Sections

  • Codecs/Rar29.dll
    .dll windows:4 windows x86 arch:x86

    6e40ff33cfdd2a821a15171e76b95c93


    Headers

    Imports

    Exports

    Sections

  • Codecs/Swap.dll
    .dll windows:4 windows x86 arch:x86

    3dc17be3d1fd2b154ea9df052d64318e


    Headers

    Imports

    Exports

    Sections

  • Formats/7z.dll
    .dll windows:4 windows x86 arch:x86

    8aecd3be368dfdecbbbcc78f0c152619


    Headers

    Imports

    Exports

    Sections

  • Formats/arj.dll
    .dll windows:4 windows x86 arch:x86

    9c3b6e0b334481ee94b79c41212db466


    Headers

    Imports

    Exports

    Sections

  • Formats/bz2.dll
    .dll windows:4 windows x86 arch:x86

    b681373ac0470dd1517fee4100dd3fdb


    Headers

    Imports

    Exports

    Sections

  • Formats/cab.dll
    .dll windows:4 windows x86 arch:x86

    29182e69ff6a5bb97cc650986f6c6c5f


    Headers

    Imports

    Exports

    Sections

  • Formats/chm.dll
    .dll windows:4 windows x86 arch:x86

    0de275a572ce8fa2fe1473e68149d5a1


    Headers

    Imports

    Exports

    Sections

  • Formats/cpio.dll
    .dll windows:4 windows x86 arch:x86

    1cdb1b36edec76ab06dfb65414141689


    Headers

    Imports

    Exports

    Sections

  • Formats/deb.dll
    .dll windows:4 windows x86 arch:x86

    72cbe291ef4f5e0bfd2625886e433abf


    Headers

    Imports

    Exports

    Sections

  • Formats/gz.dll
    .dll windows:4 windows x86 arch:x86

    64e0a86947369894b4e6847d3274604f


    Headers

    Imports

    Exports

    Sections

  • Formats/lzh.dll
    .dll windows:4 windows x86 arch:x86

    7bbff1f201e61cac3ce54f4f83c3f92e


    Headers

    Imports

    Exports

    Sections

  • Formats/rar.dll
    .dll windows:4 windows x86 arch:x86

    eda2013f97c66573abb5a407a5df4b00


    Headers

    Imports

    Exports

    Sections

  • Formats/rpm.dll
    .dll windows:4 windows x86 arch:x86

    206ba78fb3c6d8d32f4893b7227e6dcb


    Headers

    Imports

    Exports

    Sections

  • Formats/split.dll
    .dll windows:4 windows x86 arch:x86

    88f96283b0b90bdd477c5473c46cc657


    Headers

    Imports

    Exports

    Sections

  • Formats/tar.dll
    .dll windows:4 windows x86 arch:x86

    68b6634061875334d2909e254984238c


    Headers

    Imports

    Exports

    Sections

  • Formats/z.dll
    .dll windows:4 windows x86 arch:x86

    60015f5ff45e00fd097af6013ccbac08


    Headers

    Imports

    Exports

    Sections

  • Formats/zip.dll
    .dll windows:4 windows x86 arch:x86

    50949aa86600825c3e3c7397e82cc091


    Headers

    Imports

    Exports

    Sections

  • History.txt
  • Lang/af.txt
  • Lang/ar.txt
  • Lang/ast.txt
  • Lang/az.txt
  • Lang/be.txt
  • Lang/bg.txt
  • Lang/br.txt
  • Lang/ca.txt
  • Lang/cs.txt
  • Lang/da.txt
  • Lang/de.txt
  • Lang/el.txt
  • Lang/en.ttt
  • Lang/eo.txt
  • Lang/es.txt
  • Lang/et.txt
  • Lang/eu.txt
  • Lang/ext.txt
  • Lang/fa.txt
  • Lang/fi.txt
  • Lang/fr.txt
  • Lang/fur.txt
  • Lang/fy.txt
  • Lang/gl.txt
  • Lang/he.txt
  • Lang/hr.txt
  • Lang/hu.txt
  • Lang/id.txt
  • Lang/io.txt
  • Lang/it.txt
  • Lang/ja.txt
  • Lang/ka.txt
  • Lang/ko.txt
  • Lang/lt.txt
  • Lang/lv.txt
  • Lang/mk.txt
  • Lang/mn.txt
  • Lang/ms.txt
  • Lang/nl.txt
  • Lang/no.txt
  • Lang/pl.txt
  • Lang/pt-br.txt
  • Lang/pt.txt
  • Lang/ro.txt
  • Lang/ru.txt
  • Lang/sk.txt
  • Lang/sl.txt
  • Lang/sr.txt
  • Lang/sv.txt
  • Lang/ta.txt
  • Lang/th.txt
  • Lang/tr.txt
  • Lang/tt.txt
  • Lang/uk.txt
  • Lang/uz.txt
  • Lang/va.txt
  • Lang/vi.txt
  • Lang/vr.txt
  • Lang/zh-cn.txt
  • Lang/zh-tw.txt
  • License.txt
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18b26e3ef7317852fa83fde4ebd910ac


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • copying.txt
  • descript.ion
  • file_id.diz
  • readme.txt