Overview

overview

7

Static

static

3

376e1b847a...18.exe

windows7-x64

3

376e1b847a...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$_5_.exe

windows7-x64

7

$_5_.exe

windows10-2004-x64

7

shfolder.dll

windows7-x64

1

shfolder.dll

windows10-2004-x64

1

wdsh0407.chm

windows7-x64

1

wdsh0407.chm

windows10-2004-x64

1

wdsr0405.dll

windows7-x64

1

wdsr0405.dll

windows10-2004-x64

1

wdsr0407.dll

windows7-x64

1

wdsr0407.dll

windows10-2004-x64

1

windirstat.chm

windows7-x64

1

windirstat.chm

windows10-2004-x64

1

windirstat.exe

windows7-x64

7

windirstat.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    376e1b847a614cf46326aae28dc4ce4d_JaffaCakes118

  • Size

    483KB

  • MD5

    376e1b847a614cf46326aae28dc4ce4d

  • SHA1

    d68a486dd5b090ee4b218da252b41c63ff013b84

  • SHA256

    a8927d9956c9ed1f6d639fb494d0d6748055e51078e01d10bc24935a45212597

  • SHA512

    8d581ac130105ce0e0e85a0b28da279654f9be961fc38ae55fe5d1f17d40f5a759188ee3be86687a323568ec4f9d89cccfc579fed09a33c1ee768b472370fc0e

  • SSDEEP

    12288:yCjeMsiGVBKvjxTNlZaLlcMj+wXZvQpd9nP2+ZMU2g:yCjeTZa7BTsxewXZUTP2HU2g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 376e1b847a614cf46326aae28dc4ce4d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    97318da386948415d08cef4a9006d669


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_5_
    .exe windows:4 windows x86 arch:x86

    b3e2efb711bd309a22addde2f35c372c


    Headers

    Imports

    Sections

  • shfolder.dll
    .dll windows:5 windows x86 arch:x86

    a8568b57714f17bea2cb443650a1c951


    Headers

    Imports

    Exports

    Sections

  • wdsh0407.chm
    .chm
  • wdsr0405.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr0407.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • windirstat.chm
    .chm
  • windirstat.exe
    .exe windows:4 windows x86 arch:x86

    7c6d8e50d7c0e8326fce0f8eecb79276


    Headers

    Imports

    Sections