Overview

overview

7

Static

static

3

39dbbd0b43...18.exe

windows7-x64

3

39dbbd0b43...18.exe

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ck.dll

windows7-x64

3

$PLUGINSDI...ck.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...nd.dll

windows7-x64

3

$PLUGINSDI...nd.dll

windows10-2004-x64

3

DBGOWebtoon.exe

windows7-x64

3

DBGOWebtoon.exe

windows10-2004-x64

7

DBGOWebtoo...te.exe

windows7-x64

3

DBGOWebtoo...te.exe

windows10-2004-x64

7

uninstall.exe

windows7-x64

3

uninstall.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    39dbbd0b4316a54e5e62ea0543432be9_JaffaCakes118

  • Size

    744KB

  • MD5

    39dbbd0b4316a54e5e62ea0543432be9

  • SHA1

    538f8b77a814d42f7d6ef5ac2bdb68bd5c52ed50

  • SHA256

    975303e3c22f4c7f02ce6320e3df30e4496967489c7dd37ed5796b33e946c95c

  • SHA512

    102bf4d322baecfdec0c5e613a93dcc6e78114e5faa6a166b1aa42fa36557c06116620a633392a75af896c97181421785efc702cf484113762287d616236558e

  • SSDEEP

    12288:Sy4thqyJ3beXkdVWkW6i5oi+r2x26Ng7x+iEUJinBKyceohxeFOMHU5xeV:5uEyJLeXkHWToBrSTNg7siT8nBRcJhxi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs
    installer

Files

  • 39dbbd0b4316a54e5e62ea0543432be9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ischeck.dll
    .dll windows:4 windows x86 arch:x86

    63a85c96a1f6cd86193f3bc49bfc37dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    6a31b40eb314bd7c730293b0af66a1a0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    868edf13b90a019bf9f2593fe0e78d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • DBGOWebtoon.exe
    .exe windows:4 windows x86 arch:x86

    7ecbb964b5a998da78c792dbb8a91c63


    Headers

    Imports

    Sections

  • DBGOWebtoon_Update.exe
    .exe windows:4 windows x86 arch:x86

    56017ce1dd10bb52353f552af66d6720


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/BITMAP/110.bmp
  • .rsrc/DIALOG/103
  • .rsrc/DIALOG/104
  • .rsrc/DIALOG/105
  • .rsrc/DIALOG/106
  • .rsrc/DIALOG/111
  • .rsrc/GROUP_ICON/103
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2.ico
  • .rsrc/ICON/3.ico
  • .rsrc/MANIFEST/1
    .xml
  • .text