Overview

overview

7

Static

static

3

22991b78e4...18.exe

windows7-x64

7

22991b78e4...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...4_.exe

windows7-x64

7

$SYSDIR/$S...4_.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...8_.dll

windows7-x64

6

$SYSDIR/$S...8_.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    22991b78e435e3ad20919b1bef3dbf5f_JaffaCakes118

  • Size

    193KB

  • MD5

    22991b78e435e3ad20919b1bef3dbf5f

  • SHA1

    ed07cb5cfe9d12f0184870b2c0063f76e922f335

  • SHA256

    46c65671d563f50b0ea3155e928f629ca9dca762f9cc2189b639d73c7188db59

  • SHA512

    ec523b946f79b0daa359066ee4ddf07d3c526bd5611649bd9ca4d1ccdc3ff10f3b7e94ab03b44fe3da8ed5109dae88f25e2527f5f7b20e796ff78848ca20b71c

  • SSDEEP

    3072:ilpOI2wmJlJ/YJBNtQE1NyvVbOK4t+TAyvq5d2AzHcCJIbOzf+tRorLN:i+YDzQIyRO/t+7hAjnZ+od

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 22991b78e435e3ad20919b1bef3dbf5f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_14_.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $SYSDIR/$SYSDIR/$_8_.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    03eec74798f6074e060bab11162e9d33


    Headers

    Imports

    Exports

    Sections