Overview

overview

10

Static

static

10

KeyGen/KeyGen.exe

windows7-x64

1

KeyGen/KeyGen.exe

windows10-2004-x64

1

Setup.exe

windows7-x64

3

Setup.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

AKV.exe

windows7-x64

1

AKV.exe

windows10-2004-x64

1

IWM.dll

windows7-x64

3

IWM.dll

windows10-2004-x64

3

IWM.exe

windows7-x64

6

IWM.exe

windows10-2004-x64

6

IWM.dll

windows7-x64

1

IWM.dll

windows10-2004-x64

1

IWM.dll

windows7-x64

1

IWM.dll

windows10-2004-x64

1

IWM.chm

windows7-x64

1

IWM.chm

windows10-2004-x64

1

IWM.exe

windows7-x64

6

IWM.exe

windows10-2004-x64

6

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

qs.html

windows7-x64

1

qs.html

windows10-2004-x64

1

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19158ae2a3d096968a419aae6e617f88_JaffaCakes118

  • Size

    473KB

  • MD5

    19158ae2a3d096968a419aae6e617f88

  • SHA1

    620aca9d737fc3a76f68644f1dcdc0ebf215a6a8

  • SHA256

    adde6e34140cc3acf1db7a9c26e503c08a2bf26f3672223e6c03b819bcdb769a

  • SHA512

    d778be538539b875627224971b8723d204c448d01edb7090914a4138213fc5dcff44384284c198047dcf9c6c4050b0113da1af4271f4c6e4c81e13bdc3ae61bd

  • SSDEEP

    12288:w9tHK7KpaXoSiRd1E5twlkACXFQp/oRbhQD5azSG:mx3p0oSEd1EfwlkACVQp/0a6SG

Score
10/10
ardamax

Malware Config

Signatures

  • Ardamax family
    ardamax
  • Ardamax main executable 1 IoCs
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 19158ae2a3d096968a419aae6e617f88_JaffaCakes118
    .rar
  • KeyGen/KeyGen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AKV.exe
    .exe windows:4 windows x86 arch:x86

    8bfdfe6f646dcc4fff0cc33dcd2245f4


    Headers

    Imports

    Sections

  • IWM.003
    .dll windows:4 windows x86 arch:x86

    7538179af5f471b14303746be79de809


    Headers

    Imports

    Exports

    Sections

  • IWM.004
    .exe windows:4 windows x86 arch:x86

    c06456c919add16c1d5d3cbe34c37815


    Headers

    Imports

    Sections

  • IWM.006
    .dll windows:4 windows x86 arch:x86

    56a0310cc21e13f1fbc0b10b145ff8ee


    Headers

    Imports

    Exports

    Sections

  • IWM.007
    .dll windows:4 windows x86 arch:x86

    3dc027572e800ae97110388bb9368780


    Headers

    Imports

    Exports

    Sections

  • IWM.chm
    .chm
  • IWM.exe
    .exe windows:4 windows x86 arch:x86

    bae07f8a379204893304292b06dabc8d


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • menu.gif
    .gif
  • qs.html
    .html
  • tray.gif
    .gif
  • 安装说明.url
    .url