Overview

overview

7

Static

static

3

b2131eac66...18.exe

windows7-x64

7

b2131eac66...18.exe

windows10-2004-x64

7

$1/Tablacu...ff.exe

windows7-x64

3

$1/Tablacu...ff.exe

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/Tablacus.exe

windows7-x64

4

$R1/Tablacus.exe

windows10-2004-x64

3

$R1/TablacusApp.exe

windows7-x64

1

$R1/TablacusApp.exe

windows10-2004-x64

1

$R1/script...und.js

windows7-x64

3

$R1/script...und.js

windows10-2004-x64

3

$R1/script/common.js

windows7-x64

3

$R1/script/common.js

windows10-2004-x64

3

$R1/script/consts.js

windows7-x64

3

$R1/script/consts.js

windows10-2004-x64

3

$R1/script...g.html

windows7-x64

1

$R1/script...g.html

windows10-2004-x64

1

$R1/script/index.html

windows7-x64

1

$R1/script/index.html

windows10-2004-x64

1

$R1/script/index.js

windows7-x64

3

$R1/script/index.js

windows10-2004-x64

3

$R1/script...n.html

windows7-x64

1

$R1/script...n.html

windows10-2004-x64

1

$R1/script...s.html

windows7-x64

1

$R1/script...s.html

windows10-2004-x64

1

$R1/script/options.js

windows7-x64

3

$R1/script/options.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2131eac6668a03df4785e3f4178ee0d_JaffaCakes118

  • Size

    450KB

  • MD5

    b2131eac6668a03df4785e3f4178ee0d

  • SHA1

    f21fb9e1c324732298cfd24e36202fe7d7e91766

  • SHA256

    cc89d01e5a86b2333ae84abb101d1cdfecf9a91e0aeddef3ffc5f8c4e83950ed

  • SHA512

    ca05a2374283cf5b880c163bc24e57fbda04c13f870b01bd22e06e816ed7c29cac8467e378980e66179c11f6dc3c0f94a1eff6bc5c575a77953a06d53b4486e1

  • SSDEEP

    6144:zpkXGhVesqNG+sylUtLb0CIAMRMXLO1fwv/3K6YjTr8ACYvrGeSu3JRL6Tzmr1Dj:uI8sdcNqOQ/3AjTr7vHSujL6TcYg9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • b2131eac6668a03df4785e3f4178ee0d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $1/TablacusInstallerStuff.exe
    .exe windows:6 windows x86 arch:x86

    f0c3c70602aea390651e3d90231bd79d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/Tablacus.exe
    .exe windows:5 windows x86 arch:x86

    8d3fcb29b341b50d5a29b25cb6dc7da7


    Headers

    Imports

    Sections

  • $R1/TablacusApp.exe
    .exe windows:5 windows x86 arch:x86

    b18876a86793ab97030ba07644d59939


    Headers

    Imports

    Sections

  • $R1/config/window.xml
    .xml
  • $R1/init/addons.xml
    .xml
  • $R1/init/key.xml
    .xml
  • $R1/init/menus.xml
    .xml
  • $R1/init/mouse.xml
    .xml
  • $R1/lang/de.xml
  • $R1/lang/en.xml
  • $R1/lang/es.xml
  • $R1/lang/fr.xml
  • $R1/lang/it.xml
  • $R1/lang/ja.xml
  • $R1/lang/pt.xml
  • $R1/lang/ru.xml
  • $R1/lang/zh.xml
  • $R1/lang/zh_cn.xml
  • $R1/layout/1tab.xml
    .xml
  • $R1/layout/4tabs.xml
    .xml
  • $R1/layout/bottom_tab.xml
    .xml
  • $R1/layout/h2tabs.xml
    .xml
  • $R1/layout/left_tab.xml
    .xml
  • $R1/layout/right_tab.xml
    .xml
  • $R1/layout/tree_1tab.xml
    .xml
  • $R1/layout/tree_2tabs.xml
    .xml
  • $R1/layout/v2tabs.xml
    .xml
  • $R1/layout/vertical_tab.xml
    .xml
  • $R1/readme.txt
  • $R1/script/background.js
    .js
  • $R1/script/common.js
    .js
  • $R1/script/consts.js
    .js
  • $R1/script/dialog.html
    .html
  • $R1/script/index.css
  • $R1/script/index.html
    .html
  • $R1/script/index.js
    .js
  • $R1/script/location.html
    .html
  • $R1/script/options.css
  • $R1/script/options.html
    .html
  • $R1/script/options.js
    .js