Overview

overview

7

Static

static

3

21e8f8358b...18.exe

windows7-x64

7

21e8f8358b...18.exe

windows10-2004-x64

7

$PLUGINSDI...ts.dll

windows7-x64

3

$PLUGINSDI...ts.dll

windows10-2004-x64

3

$PLUGINSDI...am.dll

windows7-x64

3

$PLUGINSDI...am.dll

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

CleancopUpdate.exe

windows7-x64

1

CleancopUpdate.exe

windows10-2004-x64

1

Uninstall.exe

windows7-x64

3

Uninstall.exe

windows10-2004-x64

3

cleancop.exe

windows7-x64

3

cleancop.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    21e8f8358be6dd1fbec621ea744710c6_JaffaCakes118

  • Size

    461KB

  • MD5

    21e8f8358be6dd1fbec621ea744710c6

  • SHA1

    4568e85f6bcdad774b3c1a6c4e0ca9d5c402ebfe

  • SHA256

    9675608f9ac09fca4585cfb1cc18f05e6abd2ab88160f1178d80ca2cd5a58fc9

  • SHA512

    dcedfdf1871d2128645315b68dd0c0510e20c1b0a58fa0ce095a1d63ca75ad44513b96e251e6930da14b76cdccc773d5b93f80ea88a7eede02d4011562e2352b

  • SSDEEP

    12288:JCgsNpWfbwkrk9bome3LMuf/izNMZiKfQn:oRNpWf0kI9Ume3Zq+VIn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 21e8f8358be6dd1fbec621ea744710c6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLDeleteTextFromHosts.dll
    .dll windows:4 windows x86 arch:x86

    dbd90d24216202c56eabb32d790a9be3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWaitForKillProgram.dll
    .dll windows:4 windows x86 arch:x86

    2e92645153848ef99816d61ac6e2a921


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $WINDIR/icon2.ico
  • CleancopUpdate.exe
    .exe windows:4 windows x86 arch:x86

    40ac24db6b4b8a7b034b085307d69b30


    Headers

    Imports

    Sections

  • License.txt
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/DIALOG/102
  • .rsrc/DIALOG/105
  • .rsrc/DIALOG/106
  • .rsrc/DIALOG/107
  • .rsrc/DIALOG/111
  • .rsrc/GROUP_ICON/103
  • .rsrc/ICON/1.ico
  • .rsrc/MANIFEST/1
    .xml
  • .text
  • cleancop.exe
    .exe windows:4 windows x86 arch:x86

    b3e5dc99740399c357402475164dd321


    Headers

    Imports

    Sections