Overview

overview

7

Static

static

3

3adbdf8029...18.exe

windows7-x64

7

3adbdf8029...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DTDJ_1.exe

windows7-x64

1

DTDJ_1.exe

windows10-2004-x64

1

HookSock.dll

windows7-x64

3

HookSock.dll

windows10-2004-x64

1

lzCDP.dll

windows7-x64

1

lzCDP.dll

windows10-2004-x64

1

lzCdd.dll

windows7-x64

1

lzCdd.dll

windows10-2004-x64

1

lzDdz.dll

windows7-x64

1

lzDdz.dll

windows10-2004-x64

1

lzGJi.dll

windows7-x64

1

lzGJi.dll

windows10-2004-x64

1

lzGzh.dll

windows7-x64

1

lzGzh.dll

windows10-2004-x64

1

lzHxi.dll

windows7-x64

1

lzHxi.dll

windows10-2004-x64

1

lzPdk.dll

windows7-x64

1

lzPdk.dll

windows10-2004-x64

1

lzQsj.dll

windows7-x64

1

lzQsj.dll

windows10-2004-x64

1

lzSdy.dll

windows7-x64

1

lzSdy.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3adbdf8029dbb3312ae276329fc0379e_JaffaCakes118

  • Size

    1.6MB

  • MD5

    3adbdf8029dbb3312ae276329fc0379e

  • SHA1

    10dd847cb57902513c012787a38644666a712604

  • SHA256

    4a0dab7c7d59cadc090244263b1b6d377a3ae7c792022dad6c27490b3d6c1640

  • SHA512

    6123da5e1bbe0f244b7234284b62a15bd7da1e020107aabf4c1f1878b17d9cca7cd346ef20f1a32d13bdc2a336e38ffc882014c5f63dabcac4feeb170b4c84f6

  • SSDEEP

    49152:vOLhLQeFbrl5NV8J52F/r5duujZ4QZlcs:vEUEbJ5NV8L2F/ju+Z4Q0s

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • 3adbdf8029dbb3312ae276329fc0379e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • HookSock.dll
    .dll windows:4 windows x86 arch:x86

    ea50aaffd892f42d6309672dd6986769


    Headers

    Imports

    Exports

    Sections

  • Main_dtdj.ini
  • lzCDP.dll
    .dll windows:4 windows x86 arch:x86

    4b69b762c4e48548510cd990d07f1460


    Headers

    Imports

    Exports

    Sections

  • lzCdd.dll
    .dll windows:4 windows x86 arch:x86

    fb80b577eec61d576561a1fb3cd53b9d


    Headers

    Imports

    Exports

    Sections

  • lzDdz.dll
    .dll windows:4 windows x86 arch:x86

    4b69b762c4e48548510cd990d07f1460


    Headers

    Imports

    Exports

    Sections

  • lzGJi.dll
    .dll windows:4 windows x86 arch:x86

    489d43ec009d184e03ba2de2e5a37ae7


    Headers

    Imports

    Exports

    Sections

  • lzGzh.dll
    .dll windows:4 windows x86 arch:x86

    fb80b577eec61d576561a1fb3cd53b9d


    Headers

    Imports

    Exports

    Sections

  • lzHxi.dll
    .dll windows:4 windows x86 arch:x86

    fb80b577eec61d576561a1fb3cd53b9d


    Headers

    Imports

    Exports

    Sections

  • lzPdk.dll
    .dll windows:4 windows x86 arch:x86

    fb80b577eec61d576561a1fb3cd53b9d


    Headers

    Imports

    Exports

    Sections

  • lzQsj.dll
    .dll windows:4 windows x86 arch:x86

    4b69b762c4e48548510cd990d07f1460


    Headers

    Imports

    Exports

    Sections

  • lzSdy.dll
    .dll windows:4 windows x86 arch:x86

    fb80b577eec61d576561a1fb3cd53b9d


    Headers

    Imports

    Exports

    Sections

  • lzShJ.dll
    .dll windows:4 windows x86 arch:x86

    489d43ec009d184e03ba2de2e5a37ae7


    Headers

    Imports

    Exports

    Sections

  • lzShK.dll
    .dll windows:4 windows x86 arch:x86

    4b69b762c4e48548510cd990d07f1460


    Headers

    Imports

    Exports

    Sections

  • lzWSK.dll
    .dll windows:4 windows x86 arch:x86

    fb80b577eec61d576561a1fb3cd53b9d


    Headers

    Imports

    Exports

    Sections

  • lzYZH.dll
    .dll windows:4 windows x86 arch:x86

    4b69b762c4e48548510cd990d07f1460


    Headers

    Imports

    Exports

    Sections

  • lzbhu.dll
    .dll windows:4 windows x86 arch:x86

    489d43ec009d184e03ba2de2e5a37ae7


    Headers

    Imports

    Exports

    Sections

  • lzqpg.exe
    .exe windows:4 windows x86 arch:x86

    9c09408686072d09178bc858589baa4a


    Headers

    Imports

    Sections

  • lzwak.dll
    .dll windows:4 windows x86 arch:x86

    4b69b762c4e48548510cd990d07f1460


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • ʹ˵.txt