Overview

overview

10

Static

static

3

2e5ef1d85e...18.exe

windows7-x64

7

2e5ef1d85e...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

Extras/Bro....0.exe

windows7-x64

1

Extras/Bro....0.exe

windows10-2004-x64

1

Extras/Fil....3.exe

windows7-x64

10

Extras/Fil....3.exe

windows10-2004-x64

10

Extras/Hid....3.exe

windows7-x64

1

Extras/Hid....3.exe

windows10-2004-x64

1

Extras/Sel....0.exe

windows7-x64

1

Extras/Sel....0.exe

windows10-2004-x64

1

Extras/UpO....0.exe

windows7-x64

1

Extras/UpO....0.exe

windows10-2004-x64

1

SubMenu Co....0.exe

windows7-x64

3

SubMenu Co....0.exe

windows10-2004-x64

7

SubMenu_1.0.11.0.dll

windows7-x64

1

SubMenu_1.0.11.0.dll

windows10-2004-x64

1

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e5ef1d85e4725d3fc9d3957f7a45654_JaffaCakes118

  • Size

    659KB

  • MD5

    2e5ef1d85e4725d3fc9d3957f7a45654

  • SHA1

    071d0c1fde9444141470b140365b9ceeae850d6d

  • SHA256

    73acd4f02302a6b0097f9a37b55f694c180cfca38ffbaf528d8d8f793e8f56bb

  • SHA512

    243615537659e7604a7a4e5dc747719dbf3f04a94a8992d116697e277259751e30bcd697d0b31b1b2dfe2256a955cd1865ed16bff3a974852db3ddf4c3d440f9

  • SSDEEP

    12288:qSYAJEbgdXWLjYlCP1+3ZaxgwnIbezO9FySoM:qSYKegdXkEl2gAxHsKUFsM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 2e5ef1d85e4725d3fc9d3957f7a45654_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Extras/BrowserBackExe 1.0.exe
    .exe windows:4 windows x86 arch:x86

    316721322568e4cd04a09de14749679e


    Headers

    Imports

    Sections

  • Extras/FileExtToggleExe 1.3.exe
    .exe windows:4 windows x86 arch:x86

    6eea8fa1ce104bc025628253f9422c31


    Headers

    Imports

    Sections

  • Extras/HiddenFileToggleExe 1.3.exe
    .exe windows:4 windows x86 arch:x86

    6eea8fa1ce104bc025628253f9422c31


    Headers

    Imports

    Sections

  • Extras/SelectAllExe 1.0.exe
    .exe windows:4 windows x86 arch:x86

    316721322568e4cd04a09de14749679e


    Headers

    Imports

    Sections

  • Extras/UpOneLevelExe 1.0.exe
    .exe windows:4 windows x86 arch:x86

    8eb56098ba9d210559f8672f725099d7


    Headers

    Imports

    Sections

  • SpiritPyre Extensions Readme.txt
  • SubMenu Config_1.1.0.0.exe
    .exe windows:4 windows x86 arch:x86

    9deeaeba208974dc5b03065f50b03f6c


    Headers

    Imports

    Sections

  • SubMenu Usage Readme.txt
  • SubMenu_1.0.11.0.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    18ec282180990c35b191bc2f46c6c584


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections