Overview

overview

7

Static

static

3

41b0884f1d...18.exe

windows7-x64

3

41b0884f1d...18.exe

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ck.dll

windows7-x64

3

$PLUGINSDI...ck.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...nd.dll

windows7-x64

3

$PLUGINSDI...nd.dll

windows10-2004-x64

3

WebtoonRoom.exe

windows7-x64

3

WebtoonRoom.exe

windows10-2004-x64

7

WebtoonRoo...te.exe

windows7-x64

3

WebtoonRoo...te.exe

windows10-2004-x64

7

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    41b0884f1d9f6988afd15bff8622f643_JaffaCakes118

  • Size

    673KB

  • MD5

    41b0884f1d9f6988afd15bff8622f643

  • SHA1

    b48b1909c97881cdec4d25dcb071e32b6da103fb

  • SHA256

    338d740216e102cde49c34ecd1ccfa3d3d2946f051a751d768179ca48288336e

  • SHA512

    e87c1bab1f27f8451e3c1ac4492396ecf55ecb97bdcd624a2031f8399c9726891d1798344c9a55982304467316948aa812d6292b81ccb80a6de9baca14667f28

  • SSDEEP

    12288:D4thUpFKiq6/sM8beiEJNRFcsSEUJinf4cRsSUyxJn:Du2Rv9igrBST8ngctBxt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 41b0884f1d9f6988afd15bff8622f643_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Ischeck.dll
    .dll windows:4 windows x86 arch:x86

    251a9619bbd921d60321154c493fcc9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    868edf13b90a019bf9f2593fe0e78d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/processes_second.dll
    .dll windows:4 windows x86 arch:x86

    522ca24d77f428ea710f83ca6b5d4867


    Headers

    Imports

    Exports

    Sections

  • WebtoonRoom.exe
    .exe windows:4 windows x86 arch:x86

    e8a1a6e30f3d14eca1eba7738a706ffa


    Headers

    Imports

    Sections

  • WebtoonRoom_Update.exe
    .exe windows:4 windows x86 arch:x86

    c32730130fb00e8a7df39af5320a70db


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    868edf13b90a019bf9f2593fe0e78d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp