Overview

overview

7

Static

static

3

0ee3a8b04f...18.exe

windows7-x64

7

0ee3a8b04f...18.exe

windows10-2004-x64

7

$2/msimg32.dll

windows7-x64

1

$2/msimg32.dll

windows10-2004-x64

1

$3/msimg32.dll

windows7-x64

1

$3/msimg32.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

MLServ.exe

windows7-x64

1

MLServ.exe

windows10-2004-x64

1

MessengerLog.chm

windows7-x64

1

MessengerLog.chm

windows10-2004-x64

1

MessengerLog.exe

windows7-x64

1

MessengerLog.exe

windows10-2004-x64

1

MlogLoader.exe

windows7-x64

1

MlogLoader.exe

windows10-2004-x64

1

MlogUploader.exe

windows7-x64

1

MlogUploader.exe

windows10-2004-x64

1

RichEdMonitor.dll

windows7-x64

1

RichEdMonitor.dll

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

msimg32.dll

windows7-x64

1

msimg32.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ee3a8b04f82d6fa75e35010855aae2a_JaffaCakes118

  • Size

    927KB

  • MD5

    0ee3a8b04f82d6fa75e35010855aae2a

  • SHA1

    5b27a41c9eecfe84088915f0b1cd4b2b8680d382

  • SHA256

    056fc7c63923a21340a90f021a609ce6713504c70b9d38f5196dca6ce214e10c

  • SHA512

    c95ce79df78e16e5e0c3dc88e6b0747fe71adc0d5ff4fbaed714449dcbb462a554f3e88f4778b5f92d17bb2e01fb5374024aca50d5a8aff0527e4c0fcfe9d907

  • SSDEEP

    24576:Lu/WeDpcOVEHBh2sb39m20ew28A7PwPDRNT:0WMpcOoBp4hewX4IPzT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 0ee3a8b04f82d6fa75e35010855aae2a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $2/msimg32.dll
    .dll windows:4 windows x86 arch:x86

    a8fbd169da2ab231206783e753a0d76c


    Headers

    Imports

    Exports

    Sections

  • $3/msimg32.dll
    .dll windows:4 windows x86 arch:x86

    a8fbd169da2ab231206783e753a0d76c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MLServ.exe
    .exe windows:4 windows x86 arch:x86

    3282153de5d3eeecb392dbc130d85355


    Headers

    Imports

    Sections

  • MessengerLog.chm
    .chm
  • MessengerLog.exe
    .exe windows:4 windows x86 arch:x86

    b4257c1a6bbec898a1b9131106205f1b


    Headers

    Imports

    Sections

  • MlogLoader.exe
    .exe windows:4 windows x86 arch:x86

    681ecad9d0c89a6cfb0fb5c1b239ffea


    Headers

    Imports

    Sections

  • MlogUploader.exe
    .exe windows:4 windows x86 arch:x86

    78ab7ea35a7f873708b8eb109357ad9f


    Headers

    Imports

    Sections

  • RichEdMonitor.dll
    .dll windows:4 windows x86 arch:x86

    98e8e809a946e42cbac0c375757ae569


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • msimg32.dll
    .dll windows:4 windows x86 arch:x86

    a8fbd169da2ab231206783e753a0d76c


    Headers

    Imports

    Exports

    Sections