Overview

overview

7

Static

static

7

23797176ca...18.exe

windows7-x64

7

23797176ca...18.exe

windows10-2004-x64

7

$COMMONFIL...st.exe

windows7-x64

7

$COMMONFIL...st.exe

windows10-2004-x64

7

$PLUGINSDI...ad.dll

windows7-x64

3

$PLUGINSDI...ad.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...el.dll

windows7-x64

3

$PLUGINSDI...el.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

boanrnd.exe

windows7-x64

7

boanrnd.exe

windows10-2004-x64

7

brndhk.dll

windows7-x64

1

brndhk.dll

windows10-2004-x64

1

brndpopd.dll

windows7-x64

1

brndpopd.dll

windows10-2004-x64

1

brndupdater.exe

windows7-x64

7

brndupdater.exe

windows10-2004-x64

7

brndwcher.exe

windows7-x64

7

brndwcher.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    23797176ca5bd4c99dce63df28ed0a95_JaffaCakes118

  • Size

    2.2MB

  • MD5

    23797176ca5bd4c99dce63df28ed0a95

  • SHA1

    20d33e8edcae3533b3ac1e68e5b0ff730e67ba89

  • SHA256

    19fe1a868533c4cc30693475b72f22bc2d5ff8365608fa059fdbc477d364d59e

  • SHA512

    46e490e354408f123b9ba71cfad75450a2373aa54ddfd9de787ba08d65f3a7e17f52310d978d36e1dce117d1254ef7e8c4703a15f4a6ca1a72c0589d9f3c96ac

  • SSDEEP

    49152:6AsQpsQN+o/TKcFppyc9JgYdqsYMKIbliqvvJPuUMHMTwUgcSb2HNk7:OQppN+o/WcFppyc9V/KeRJP5+MTEs+7

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 23797176ca5bd4c99dce63df28ed0a95_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/boanrnd/brnduninst.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    24a4a671f5cc294ce3543d18a1e873cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    fedb8e95b3698a6c05b69204d3c2de7a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:4 windows x86 arch:x86

    7b20d7ddf67d32ef46980776247198a1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • boanrnd.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • brndhk.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • brndpopd.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • brndupdater.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • brndwcher.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections