Overview
overview
7Static
static
302b8abad47...18.exe
windows7-x64
702b8abad47...18.exe
windows10-2004-x64
7$0/uninstall.exe
windows7-x64
7$0/uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$0/zwankysearch.dll
windows7-x64
1$0/zwankysearch.dll
windows10-2004-x64
1$0/zwankysearch.exe
windows7-x64
1$0/zwankysearch.exe
windows10-2004-x64
1$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3General
- Target 02b8abad471036589e86b8b94d98a345_JaffaCakes118
- Size 697KB
- Sample240620-etscessfmq
- SHA256 e223f60ac7d4de97d15b02c451531144e95b2a2caabf73ef11a05863116eac54
- MD5 02b8abad471036589e86b8b94d98a345
- SHA1 15a1ebef90c2e8eda57b547284c858dec5c0697c
- SHA512 d8b7ff34204cb4d6d938e0c9e3bfbdc1631e7e427eae36a985873399ac90d7dc7b7c0682e0180311c9285884898b2d56363a29535733d6a7fbf9d74097e8e7c9
- SSDEEP 12288:5UIhAgU6vtay2X8kJVjs6WgMB+oNrBNH0xv5sGs5STesq4GDi6je58:5UIhDZvb2X/JVjwB+oNtkmY24u
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
02b8abad471036589e86b8b94d98a345_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
02b8abad471036589e86b8b94d98a345_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$0/uninstall.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$0/uninstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$0/zwankysearch.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$0/zwankysearch.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$0/zwankysearch.exe
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
$0/zwankysearch.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
- Target 02b8abad471036589e86b8b94d98a345_JaffaCakes118
- Size 697KB
- SHA256 e223f60ac7d4de97d15b02c451531144e95b2a2caabf73ef11a05863116eac54
- MD5 02b8abad471036589e86b8b94d98a345
- SHA1 15a1ebef90c2e8eda57b547284c858dec5c0697c
- SHA512 d8b7ff34204cb4d6d938e0c9e3bfbdc1631e7e427eae36a985873399ac90d7dc7b7c0682e0180311c9285884898b2d56363a29535733d6a7fbf9d74097e8e7c9
- SSDEEP 12288:5UIhAgU6vtay2X8kJVjs6WgMB+oNrBNH0xv5sGs5STesq4GDi6je58:5UIhDZvb2X/JVjwB+oNtkmY24u
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
- Target $0/uninstall.exe
- Size 83KB
- SHA256 82a1fe8e22e3e3ccb149d5bdcc8cbfec18d89dd9277b909e725faed309165487
- MD5 26d12a09fd0b7b3e32e93355a3a110af
- SHA1 1e1e8772d579ae03fd6f35a7b95fe6fd384cf5a1
- SHA512 524df1ec0ad2980236601fa1abfd30451f4d3eac681ad50d12ad9b981f5c75ff7b0dab0541ad269edb5e4e653088635acb1522f1c2d8bd0816db0be11901aa56
- SSDEEP 1536:WEkjY1zy214Qay0DGkJ7qAELVigJ83ZKRcpw/1q792sX7Ia12/DCJ:9kjAJ4dDGkJ+AI0vcuo1qRka0/s
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 13KB
- SHA256 551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc
- MD5 d765c492c21689e3d9d61634371fd861
- SHA1 ac200933671ae52c9d5544d0e2e8e9144d286c83
- SHA512 9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f
- SSDEEP 192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd
- MD5 fe24766ba314f620d57d0cf7339103c0
- SHA1 8641545f03f03ff07485d6ec4d7b41cbb898c269
- SHA512 60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3
- SSDEEP 192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $0/zwankysearch.dll
- Size 564KB
- SHA256 d472a71268d322f9bbb476d9436f8e3f1de7544a1931e79ab2e74ca466d69fc8
- MD5 50c053dde12ebd2beaef57da46b978b3
- SHA1 2b50d1e332b100fb34c69ca2fc71af73a5dca37a
- SHA512 6acf284544a0eafc5a7d28362ff243784668550a1a4a3160720dd8d932a7893a6802fc72c07066383e20357c9884a6274f3bbce13b8087b514837ec44ffaaf2c
- SSDEEP 12288:yXOxCW8+P2a2MMcd/x8e6nEVsMGtSuPnWOjiJZQ0PC:9xo+Pj2i/x8n6sMGwy9jiJHPC
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target $0/zwankysearch.exe
- Size 56KB
- SHA256 131bf3daf00e100d63f8c6615c808835de60d3f7f0ffd506d67a201a2883c770
- MD5 e1267e94a1e307edbccb999b3af92c1e
- SHA1 a02a81ce27bea01e9d5eb29133311a66fff661f9
- SHA512 4cdfb59b565ce27a919f86964ce7295f4ba00d9dfd28df2079fc2f1af4343bb23bddce1c30729a59181a3f87910becf0543a89baa95beb92127cf73be79a4bf4
- SSDEEP 1536:d3D7Hk3JOih0EExmF0lYB+xSblUBDLiD9QJ:d/8JO60AjIiD92
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target $PLUGINSDIR/InstallOptions.dll
- Size 13KB
- SHA256 551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc
- MD5 d765c492c21689e3d9d61634371fd861
- SHA1 ac200933671ae52c9d5544d0e2e8e9144d286c83
- SHA512 9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f
- SSDEEP 192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd
- MD5 fe24766ba314f620d57d0cf7339103c0
- SHA1 8641545f03f03ff07485d6ec4d7b41cbb898c269
- SHA512 60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3
- SSDEEP 192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB
- MD5 SHA1 SHA512 SSDEEP
Score3/10