Overview

overview

7

Static

static

3

5c0660fd06...18.exe

windows7-x64

7

5c0660fd06...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

1

$R0.dll

windows10-2004-x64

1

$R2/NSIS.L...NT.exe

windows7-x64

1

$R2/NSIS.L...NT.exe

windows10-2004-x64

1

tbgftp.exe

windows7-x64

1

tbgftp.exe

windows10-2004-x64

1

turboget.exe

windows7-x64

7

turboget.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5c0660fd06f6c81c7f7a3e62fc8ca5df_JaffaCakes118

  • Size

    4.8MB

  • MD5

    5c0660fd06f6c81c7f7a3e62fc8ca5df

  • SHA1

    16220f92bb6d01b39f7e69dce1f95fb9a721b471

  • SHA256

    c06f1a98cd7090c8ec68b319e824fb552d8c719344031d20c47efeadd54f3826

  • SHA512

    38ae53ac558cf74962d84cd24d6cd5b8838c555e3a3a161af812477d6d9d4291ca5e50446d5344a351760d0987224620a48a3597983ec21bd5e2e91f3fe70715

  • SSDEEP

    98304:P3Ocny6AJZfZA3tOcdEhBxemEIG3E+HVQlho/1DJNvGPFqa7xwXKDRP:PRny6eZhsOcdEhBxemEz0LbUfEtOsP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c0660fd06f6c81c7f7a3e62fc8ca5df_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    8fbbf807b5bf33729f0092d4b8c483c4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    7c83a9800c9b9878cc1abe781ae1d787


    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v2.$HWNDPARENT.exe
    .exe windows:4 windows x86 arch:x86

    cde62e7f485f127cc80c3ffdb9157507


    Headers

    Imports

    Sections

  • dht_routing_table_bt
  • history.txt
  • tbgftp.exe
    .exe windows:4 windows x86 arch:x86

    f502d00b3c19f1933399e951baa72ba6


    Headers

    Imports

    Sections

  • turboget.exe
    .exe windows:4 windows x86 arch:x86

    0539a31253f066f6315e4c0a3a3568dd


    Headers

    Imports

    Sections