Overview

overview

7

Static

static

3

3a348f5cb2...18.exe

windows7-x64

7

3a348f5cb2...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...4_.dll

windows7-x64

6

$SYSDIR/$S...4_.dll

windows10-2004-x64

6

$SYSDIR/$S...st.exe

windows7-x64

7

$SYSDIR/$S...st.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a348f5cb24f3f1cb5886aee439e47f9_JaffaCakes118

  • Size

    369KB

  • MD5

    3a348f5cb24f3f1cb5886aee439e47f9

  • SHA1

    b9d6e6986853fd9906f63ffa2aba6f9e3131ed07

  • SHA256

    2df7b1192d70c99adfe283886ce507152605a4bcf4cb1dd19d39ff33e45bc5ef

  • SHA512

    0ad914480766e78cfd1935fe01d67ea6ac0531c5acc99b68b69e5058c92a61b35ef30daf60daa9579e307d07671d336697bc66aea6f2fa122a7ce6c7eb5e5307

  • SSDEEP

    6144:G+YVwLHj+DmKC0+BNU0DRDObuuyNfsqAvx+UBynS92Ixw+jiobqifz:jLHj+VKbz1DCRyNfsVvxA3Ia5o

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 3a348f5cb24f3f1cb5886aee439e47f9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_4_
    .dll regsvr32 windows:5 windows x86 arch:x86

    01f0f1ddc1d0fb1260e33180fabf452c


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_4_-uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections