Overview
overview
7Static
static
3268ea79d8c...18.exe
windows7-x64
7268ea79d8c...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$TEMP/Toolbar.exe
windows7-x64
7$TEMP/Toolbar.exe
windows10-2004-x64
7content/ctoolbar.js
windows7-x64
3content/ctoolbar.js
windows10-2004-x64
3components...rch.js
windows7-x64
3components...rch.js
windows10-2004-x64
3components...bar.js
windows7-x64
3components...bar.js
windows10-2004-x64
3components...rt.dll
windows7-x64
1components...rt.dll
windows10-2004-x64
1components...ax.dll
windows7-x64
1components...ax.dll
windows10-2004-x64
1components...icy.js
windows7-x64
3components...icy.js
windows10-2004-x64
3lib/xpcom.js
windows7-x64
3lib/xpcom.js
windows10-2004-x64
3Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 23:04
Static task
static1
Behavioral task
behavioral1
Sample
268ea79d8c653e5ffb1214e078b30851_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
268ea79d8c653e5ffb1214e078b30851_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
$TEMP/Toolbar.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$TEMP/Toolbar.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
content/ctoolbar.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
content/ctoolbar.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
components/ConduitAutoCompleteSearch.js
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
components/ConduitAutoCompleteSearch.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
components/ConduitToolbar.js
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
components/ConduitToolbar.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
components/FFExternalAlert.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
components/FFExternalAlert.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
components/npmozax.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
components/npmozax.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
components/nsAxSecurityPolicy.js
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
components/nsAxSecurityPolicy.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
lib/xpcom.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
lib/xpcom.js
Resource
win10v2004-20240508-en
General
-
Target
components/nsAxSecurityPolicy.js
-
Size
8KB
-
MD5
c982f14a117ca444fcd4e558684e72ad
-
SHA1
d349adb454d434939ad56937dfc6b77bc9bcd1b9
-
SHA256
fe1cf8b6c350ce8b890ab8aa1c2e8441dd9c672b43439e6241bd90b63bee3718
-
SHA512
8ce89bcdd31f3b8c529a14255f69c684216eaab44987612b094f1a2c2fed94fd43877caad56fb082eabf1e2de20870b9e681e2f2b04baf55fae1fa847a95b560
-
SSDEEP
96:8HeHqTzNT0oIOyYDVvJR0zrvwby0eNPNEla0cOnJujv/abPHJ1F9jYuOonoDZt9B:vH0zNT0KyYJKFSSaaml/KgXD4vb
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs