Overview

overview

7

Static

static

3

2239f113de...18.exe

windows7-x64

7

2239f113de...18.exe

windows10-2004-x64

7

$2/msimg32.dll

windows7-x64

1

$2/msimg32.dll

windows10-2004-x64

1

$3/msimg32.dll

windows7-x64

1

$3/msimg32.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

MLServ.exe

windows7-x64

1

MLServ.exe

windows10-2004-x64

1

MessengerLog.chm

windows7-x64

1

MessengerLog.chm

windows10-2004-x64

1

MessengerLog.exe

windows7-x64

1

MessengerLog.exe

windows10-2004-x64

1

MlogLoader.exe

windows7-x64

1

MlogLoader.exe

windows10-2004-x64

1

RichEdMonitor.dll

windows7-x64

1

RichEdMonitor.dll

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

msimg32.dll

windows7-x64

1

msimg32.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2239f113de89a78e390a1bb6e5dfc0c8_JaffaCakes118

  • Size

    902KB

  • MD5

    2239f113de89a78e390a1bb6e5dfc0c8

  • SHA1

    e5ee9a13fc508efd93ec386342dc2957580c6263

  • SHA256

    66d9ba44e0a89f2a05269cfaf35be93a5384dcd95c1572b795d3054662b99316

  • SHA512

    505f72fc76c2a51e13e6532d8461fd3ee9a09b54e1b9b5820df95feb63d26c6e31c3802fd1511e1e938cde203cd41c2720027f9817a0e5436df6ee59205b5e76

  • SSDEEP

    24576:3R8mgSfzovaYFEc9UFpAE34h2sb39m2hufcQk5puzJBXEQ:CmgS7oSYFEc9iB34p4dk5oB0Q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 2239f113de89a78e390a1bb6e5dfc0c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $2/msimg32.dll
    .dll windows:4 windows x86 arch:x86

    addbfbd28e4941f1f8bb8b9b46d3f9d4


    Headers

    Imports

    Exports

    Sections

  • $3/msimg32.dll
    .dll windows:4 windows x86 arch:x86

    addbfbd28e4941f1f8bb8b9b46d3f9d4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MLServ.exe
    .exe windows:4 windows x86 arch:x86

    6d7041e5ef21ff462801f11059cc4dc0


    Headers

    Imports

    Sections

  • MessengerLog.chm
    .chm
  • MessengerLog.exe
    .exe windows:4 windows x86 arch:x86

    09e4277710c65fd67b5119b5a9e70083


    Headers

    Imports

    Sections

  • MlogLoader.exe
    .exe windows:4 windows x86 arch:x86

    679ec3c64ab9eeabb1ef9bf28ccb78d7


    Headers

    Imports

    Sections

  • RichEdMonitor.dll
    .dll windows:4 windows x86 arch:x86

    774214e60e8c203601692ceded98e95b


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • msimg32.dll
    .dll windows:4 windows x86 arch:x86

    addbfbd28e4941f1f8bb8b9b46d3f9d4


    Headers

    Imports

    Exports

    Sections