Overview

overview

7

Static

static

3

b405db4f64...18.exe

windows7-x64

7

b405db4f64...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI..._n.dll

windows7-x64

3

$PLUGINSDI..._n.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nxs.dll

windows7-x64

1

$PLUGINSDIR/nxs.dll

windows10-2004-x64

1

$TEMP/$_73_/ext.exe

windows7-x64

1

$TEMP/$_73_/ext.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b405db4f64ec768863534605a1df26f6_JaffaCakes118

  • Size

    563KB

  • MD5

    b405db4f64ec768863534605a1df26f6

  • SHA1

    f45b4d7f349af975b9de0b3fe53e8e3e23e0bc2b

  • SHA256

    d4b2dd9908eea217d53b0125123d7187a6fa050533b7c979a56bf78bacf90255

  • SHA512

    8f3acfef5b61c44f6863129ffa78667c0958f63fa1340b98c73c2cb805aa8df4480b84be425962095936c83397678e91b26f79675eff2fb9f6612b0b5b8d11f8

  • SSDEEP

    12288:DNKbuhqC3AAl1rYLBPfx/JBhnkXUTOlLdaSOo1QIrs1C80ALixX:DN7ZQS1UPJ/TW0OlLghCQY2C89LixX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • b405db4f64ec768863534605a1df26f6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:5 windows x86 arch:x86

    17ea51acf0005f354251d1882460a13c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISpcre.dll
    .dll windows:4 windows x86 arch:x86

    3efd46aba10b2e88f0bd15c6467e81ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc_n.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nxs.dll
    .dll windows:4 windows x86 arch:x86

    fd495db6c916b55c715b6e970a4627e1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_73_/$_73_.zip
    .zip
  • $TEMP/$_73_/ext.doc
    .exe windows:4 windows x86 arch:x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections