Overview

overview

7

Static

static

3

44e6d47c48...18.exe

windows7-x64

7

44e6d47c48...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

OfferBoxSetupES.exe

windows7-x64

7

OfferBoxSetupES.exe

windows10-2004-x64

7

OfferBoxSetupFR.exe

windows7-x64

7

OfferBoxSetupFR.exe

windows10-2004-x64

7

OfferBoxSetupIT.exe

windows7-x64

7

OfferBoxSetupIT.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    44e6d47c481f434108551066f756994a_JaffaCakes118

  • Size

    322KB

  • MD5

    44e6d47c481f434108551066f756994a

  • SHA1

    ee74c6d942e34730c049f4b0bd720b32c4687315

  • SHA256

    2df5325cc0bd921ee363c5cb981bf0e3085236fc2c16339d33882a3a551fc4b5

  • SHA512

    851945db006db37e4a31ba8a4bc370cb116687d14fcd655e7296b7e0f6168080dc09de4b4b98c4c133b4ab7f3173ce2c5dbe5ca8b6f04f87a4e9978818e986a2

  • SSDEEP

    6144:RsBhi0Hjc0SvjH6EZcigcyRVxfZXjlGNi5YUaB1e7xSdMhgL:qDc0SvUiIRTtjcNa1au7xS2h8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 44e6d47c481f434108551066f756994a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c738f2bff5250297b240f1c24f55ddab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    54317f9e35e039c28fdb421cf518703e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIRfinish.bmp
  • $PLUGINSDIRlogo.bmp
  • $PLUGINSDIRnsis.bmp
  • OfferBoxSetupES.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • OfferBoxSetupFR.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • OfferBoxSetupIT.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections