Overview

overview

3

Static

static

3

08ba7e2a5d...18.exe

windows7-x64

3

08ba7e2a5d...18.exe

windows10-2004-x64

3

$PLUGINSDI...up.exe

windows7-x64

3

$PLUGINSDI...up.exe

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$R1.exe

windows7-x64

$R1.exe

windows10-2004-x64

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

1

$PLUGINSDI...ss.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/nswg.dll

windows7-x64

3

$PLUGINSDIR/nswg.dll

windows10-2004-x64

3

$PLUGINSDI...e.html

windows7-x64

1

$PLUGINSDI...e.html

windows10-2004-x64

1

$PLUGINSDI...w.html

windows7-x64

1

$PLUGINSDI...w.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    08ba7e2a5dd3cca7fcdd2feee4954316_JaffaCakes118

  • Size

    610KB

  • MD5

    08ba7e2a5dd3cca7fcdd2feee4954316

  • SHA1

    6954aab6f3d0c89d7da13873bc3dcfc78958cb8a

  • SHA256

    34dba595d970d109a2a512756b9a795d6949f6c2edc97ca02d3015818afeb8af

  • SHA512

    f187954324a3f36fa8b11305fb30bfbd1876e5b2815d467feabee1142d2aa657fd27358718c38bfab5b9da39a361c17f029ff3a5f26cde8894ccbad08c66ed82

  • SSDEEP

    12288:Rp0nJVwiz3HS1WemsD6Qw/9GU76MrTx05cw6EllyCFBU+:wnJ73y1WPsD6QCTu1qullyC/U+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 08ba7e2a5dd3cca7fcdd2feee4954316_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Background.png
    .png
  • $PLUGINSDIR/FLVProPlayerSetup.exe.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:5 windows x86 arch:x86

    8ef047e6217a2c4c5df9deca3b97460c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $R1
    .exe windows:5 windows x86 arch:x86

    f6085725b217d71439615c9eafa7e4ed


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InetLoadEx.dll
    .dll windows:5 windows x86 arch:x86

    999c0f7645164521b950b822906fa062


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Progress.dll
    .dll windows:5 windows x86 arch:x86

    a69514795c7cde48357cbe091be0aadc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:5 windows x86 arch:x86

    8ef047e6217a2c4c5df9deca3b97460c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/button-active.gif
    .gif
  • $PLUGINSDIR/button.gif
    .gif
  • $PLUGINSDIR/nswg.dll
    .dll windows:5 windows x86 arch:x86

    8bf8bda2787bf4acaa6b0939cff192da


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/welcomebg.gif
    .gif
  • $PLUGINSDIR/welcomepage.html
    .html
  • $PLUGINSDIR/welcomepage_noadw.html
    .html