Overview

overview

3

Static

static

3

308ac560c0...18.exe

windows7-x64

3

308ac560c0...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$TEMP/getm...ss.dll

windows7-x64

3

$TEMP/getm...ss.dll

windows10-2004-x64

3

CrashReport.exe

windows7-x64

1

CrashReport.exe

windows10-2004-x64

1

Encrypt.dll

windows7-x64

3

Encrypt.dll

windows10-2004-x64

3

Funshion.exe

windows7-x64

1

Funshion.exe

windows10-2004-x64

1

FunshionService.exe

windows7-x64

1

FunshionService.exe

windows10-2004-x64

1

GetMACAddress.dll

windows7-x64

1

GetMACAddress.dll

windows10-2004-x64

3

LangResEnAmerican.dll

windows7-x64

1

LangResEnAmerican.dll

windows10-2004-x64

1

RouterSetting.dll

windows7-x64

1

RouterSetting.dll

windows10-2004-x64

3

dbghelp.dll

windows7-x64

1

dbghelp.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    308ac560c047d9810aec9f5bbd9e6447_JaffaCakes118

  • Size

    1.5MB

  • MD5

    308ac560c047d9810aec9f5bbd9e6447

  • SHA1

    3f07ed7eb6490a8f6e9cfe2eb3cdc8adef312038

  • SHA256

    cf3230428a7cad7bc1fa0cc38719dd4124626139747824827b3c0fc6bfb62704

  • SHA512

    0bb5e66dbe95402d756da7d7d146342d3aa577b96042086197399cef9295efce0a252d0595eebaa3fb1d3249132ee59999154f7c3305a05f7b6cbd4821762702

  • SSDEEP

    24576:bpsNHeMOehTDnXXj33fG9sHbVzhPvT5rWd6jceHvDatEwl1YyJOdOx3U7SkBjrwp:bpsZ3Hh/nrfus7VdPb5KdleHvc71YJAl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 308ac560c047d9810aec9f5bbd9e6447_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstPath.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WelcomePage.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/blank.bmp
  • $TEMP/getmacaddress.dll
    .dll windows:5 windows x86 arch:x86

    c32bcf78f4f0a2f4e84bcb8498a25c4c


    Headers

    Imports

    Exports

    Sections

  • $TEMP/installpathcn.bmp
  • $TEMP/installpathen.bmp
  • $TEMP/instpath.ini
  • $TEMP/welcomepage.ini
  • CrashReport.exe
    .exe windows:4 windows x86 arch:x86

    f37da4a00e39c7394750ad76aa3a05cc


    Code Sign

    Headers

    Imports

    Sections

  • Encrypt.dll
    .dll windows:4 windows x86 arch:x86

    9db75371d7554a8ca5b7e27a94fca919


    Headers

    Imports

    Exports

    Sections

  • Funshion.exe
    .exe windows:4 windows x86 arch:x86

    07164931ad5f1f2bca46d5318fd69c3b


    Code Sign

    Headers

    Imports

    Sections

  • FunshionService.exe
    .exe windows:4 windows x86 arch:x86

    9174cd0aec30fc75f8e5a1ff3744f62c


    Code Sign

    Headers

    Imports

    Sections

  • GetMACAddress.dll
    .dll windows:5 windows x86 arch:x86

    c32bcf78f4f0a2f4e84bcb8498a25c4c


    Headers

    Imports

    Exports

    Sections

  • LangResEnAmerican.dll
    .dll windows:4 windows x86 arch:x86

    22b98c5c8c68a5c45b232e3b1c1c06e3


    Headers

    Imports

    Sections

  • RouterSetting.dll
    .dll windows:4 windows x86 arch:x86

    c20102683ed71504e085607217e86e2c


    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:7 windows x86 arch:x86


    Headers

    Sections