Overview
overview
7Static
static
73b9628cd00...18.exe
windows7-x64
73b9628cd00...18.exe
windows10-2004-x64
7//...ll.exe
windows7-x64
//...ll.exe
windows10-2004-x64
/IMPlugin.dll
windows7-x64
/IMPlugin.dll
windows10-2004-x64
/UpGrade.exe
windows7-x64
/UpGrade.exe
windows10-2004-x64
/VEDecoder.dll
windows7-x64
/VEDecoder.dll
windows10-2004-x64
/VEmotion.chm
windows7-x64
/VEmotion.chm
windows10-2004-x64
/VEmotion.exe
windows7-x64
/VEmotion.exe
windows10-2004-x64
/dsound.dll
windows7-x64
/dsound.dll
windows10-2004-x64
/Insta...ns.dll
windows7-x64
/Insta...ns.dll
windows10-2004-x64
General
-
Target
3b9628cd00ff50399ee99210673121f0_JaffaCakes118
-
Size
1.2MB
-
Sample
240712-cdsxxawflf
-
MD5
3b9628cd00ff50399ee99210673121f0
-
SHA1
b6943df6480e6afa8749b4389fb7b0ccda725b64
-
SHA256
faa87bd931e59dbd7482a7702b251dacdfc71bbbe02cc0dc5d4607b6764dbfb4
-
SHA512
5ffc1f2667830281d10a728c093f4565d6c2edf221fe8706901a1d0ff40f133663a12a46c0273b8c5f9dd6c1724712159852a2033cbba5f46a36d345474c9e08
-
SSDEEP
24576:Pl8wvYdeQdR+E3zSGEpE59gx29Eyre0WAB0GGgcxJSzkImeGOp:Pl8wvymEjCf89EgeUuGocxmZOp
Behavioral task
behavioral1
Sample
3b9628cd00ff50399ee99210673121f0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b9628cd00ff50399ee99210673121f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
//Uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
//Uninstall.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
/IMPlugin.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
/IMPlugin.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
/UpGrade.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
/UpGrade.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
/VEDecoder.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
/VEDecoder.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
/VEmotion.chm
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
/VEmotion.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
/VEmotion.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
/VEmotion.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
/dsound.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
/dsound.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
/InstallOptions.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3b9628cd00ff50399ee99210673121f0_JaffaCakes118
-
Size
1.2MB
-
MD5
3b9628cd00ff50399ee99210673121f0
-
SHA1
b6943df6480e6afa8749b4389fb7b0ccda725b64
-
SHA256
faa87bd931e59dbd7482a7702b251dacdfc71bbbe02cc0dc5d4607b6764dbfb4
-
SHA512
5ffc1f2667830281d10a728c093f4565d6c2edf221fe8706901a1d0ff40f133663a12a46c0273b8c5f9dd6c1724712159852a2033cbba5f46a36d345474c9e08
-
SSDEEP
24576:Pl8wvYdeQdR+E3zSGEpE59gx29Eyre0WAB0GGgcxJSzkImeGOp:Pl8wvymEjCf89EgeUuGocxmZOp
Score7/10-
Loads dropped DLL
-
-
-
Target
//Uninstall.exe
-
Size
45KB
-
MD5
3f17f99764cf4e76471eed215c511e37
-
SHA1
e0c3bb0e8b735dfedfaca8260bd23bff97a368aa
-
SHA256
42320c7b37889426c5907809a4f964910773d8642325af23d82afa800437c318
-
SHA512
a24b3f17c2998dd05952b34d6e2e1813001fb0ff2ca6320ac4ddbcd120ca741951841c5d812115361531b635e40542e8291e3f526afc13814fbda6751cac01d1
-
SSDEEP
768:UN0D33cGmS3XhX1my9eFBhLDMwOfVnX9pcF/hIcBCBvBtLFlBJPQ9CJRneMdVaf/:UN0DncGm+gQEBhLDM1MF/+dBJBdQCrK
Score1/10 -
-
-
Target
/IMPlugin.dll
-
Size
944KB
-
MD5
a5eb8aab3f081ce61a6eaec89ce89b58
-
SHA1
218d7c9aebe9546812d5b19b76ffb1939f05b0e4
-
SHA256
04ec539b1f4c5c948d1d0fd04a052d36d3bdd27d507fcea6162639df67830bf1
-
SHA512
c7eb8f696440f47f37328e59a4fae42fd02d18a22dad8468ab4a6019e6481aab4c3849323dc61cc353309dd873f7e19bb29402ce1c44ea4bbe79e37fd1457a8d
-
SSDEEP
3072:cBx0LG7QTN1GCgBjx7UKTxGYJbox8+TjdkE:cDs1GJBpcT
Score1/10 -
-
-
Target
/UpGrade.exe
-
Size
108KB
-
MD5
282d9418774e350017266caf147aaa5f
-
SHA1
240da35ca371846e4f7d23391f7b698124864339
-
SHA256
6565cb6c81ddecbe480b5051740bf352148491e390333e623b3525e7c85e16a2
-
SHA512
d47bea5c8dde3acfaa27af372d2b44eea00fe66cd4fae166dd4af4f022fc46d8b3a3b7a5d977d65a2af2c02790ed2bd558fb3702fa9a2415cb0008bacb4f2223
-
SSDEEP
3072:nVaBQOpLr+Moqmk9HrEbzYqcDSA1L44RpU:VuNoC9ezYqmd1k4R
Score1/10 -
-
-
Target
/VEDecoder.dll
-
Size
105KB
-
MD5
56c9d0d953cdc9c52102493e54e890cd
-
SHA1
47c0603ef08f1c0e8410a0bf9a739355c8d56b27
-
SHA256
34f4df548861334956814a9aa13ab62351b3f8db0ac62ce4385d69455fa63db8
-
SHA512
46f383a575d750f4c5267b7d60f5c762017015c01da0b511b01c4e17926df551e53a6c49499139bd3d924c3050b580c5a27f3aea2b5164a2fffd23faae3ac10b
-
SSDEEP
3072:hj6QcFT8WfUWdaPQyMiT/dk7F9ux7S698nAoB8E+Tb:hVcR8WfUWUZMiTF2F9uRSH+T
Score1/10 -
-
-
Target
/VEmotion.chm
-
Size
396KB
-
MD5
21ba93f83d05c951bf2c8497280c8338
-
SHA1
d36cf85453285897899a20a0a8ea3d7a6142328f
-
SHA256
3d361b4956c2eaae38fede3ffcae0caf9badddb15dcd735d71134c1005adeb86
-
SHA512
d2402f124efdcaeedd68f05f144bfafcb1b9dd536eaf6d9df4497516d902eea6ef909a3fd35809d7499d3d297dbd926dc8b818a70358312afcaecd987e409be9
-
SSDEEP
12288:KNdE1vkOZ9EXqQje19gkAxDGmBZkKkLGgLGsNPzp:KNyx79EXre1WfZgVGgLXbp
Score1/10 -
-
-
Target
/VEmotion.exe
-
Size
291KB
-
MD5
2d1737e97df747a63fbea746ef2e595c
-
SHA1
45c4b0d115f3311187ba2cc884b8c1bea802315b
-
SHA256
23c909f1689af662f2c8e228a3ef6bb142f781484709915d934bdeeccb4678e4
-
SHA512
6d19995bcc044fd80c09a708f822dca19a4dbf5f57fb8e6b393eea862c90eccc0b44778a226d650cc21603dd75c609d8a9e834e6ad58d3c8267d89250c2edc0f
-
SSDEEP
6144:sKTz4Ieh9IHv6f4TaqnMBukUnCUQVD1/oZgBPJ:DTcuC2dnMvUnITBP
Score1/10 -
-
-
Target
/dsound.dll
-
Size
36KB
-
MD5
27a2cf6f2c00d961304e3fee0f12979a
-
SHA1
3b486c6949b991c9449c13e7ea2b61a3b5ae717c
-
SHA256
2f52d1f6d5c9dde627dbc683861f14e86c898617f8f323f9fb5a0e6b7443164a
-
SHA512
30317b7fbfc229000002eeca5dcab5fc7efc1ce0aee0152a3b0571a0eca7c761ff9c4fe7e489e06566797cf798b719c31fe947635b6d0fa96adc96339c926fb6
-
SSDEEP
768:LurcYYzCegw9avY+80bnl1ZQ31olQznibqv6xeha5PF:OchzC3wIvbbjUolQr4M6
Score1/10 -
-
-
Target
/InstallOptions.dll
-
Size
12KB
-
MD5
695751df50c11f303b060d63eababe1d
-
SHA1
ffa5fa91750c3e63589fecae8aa90c232611c94d
-
SHA256
4f871b4c8815758f7718ad68d688c6dc05cae205ddf3bcb00147a99746414435
-
SHA512
c9877e0d08c65b23717f3acf3be92ead79c6afde594bd4358694e128fb7149f4a1f33380fae0fb65411e5c68a9d91d2a353b4ef3da5169d3452441eb65880ce0
-
SSDEEP
192:ebtwKT+lyf+vQ/QnXN4dGIIvfe+ncp+hebyWLblA3xrh3Gr4:gtwKTOyZQX+dGNvfe+2+1WLbsxBG
Score1/10 -