Overview

overview

7

Static

static

3

eraser_v5.8c1.3_4.exe

windows7-x64

7

eraser_v5.8c1.3_4.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

ASUpdate.dll

windows7-x64

3

ASUpdate.dll

windows10-2004-x64

3

Eraser.dll

windows7-x64

3

Eraser.dll

windows10-2004-x64

3

Eraser.exe

windows7-x64

5

Eraser.exe

windows10-2004-x64

5

Eraserl.exe

windows7-x64

1

Eraserl.exe

windows10-2004-x64

1

Erasext.dll

windows7-x64

1

Erasext.dll

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

Verify.exe

windows7-x64

3

Verify.exe

windows10-2004-x64

3

eraser.exe

windows7-x64

5

eraser.exe

windows10-2004-x64

5

eraserd.exe

windows7-x64

eraserd.exe

windows10-2004-x64

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    611acf487ea2d3fc6be3dbffffa93182_JaffaCakes118

  • Size

    1020KB

  • MD5

    611acf487ea2d3fc6be3dbffffa93182

  • SHA1

    d8c340345e709cc7b8476020fdf817230d6393c0

  • SHA256

    fa33dfd4dac572c0421bbd2079982ea5fd0325139dcab9490410c58c234aa6ac

  • SHA512

    c1aec0a73fe6c132363209b4034350ad771db2ddd1ce54d5eba036f3616f435f58c48df56694bf4fbe3c171e0e85ceafc21424a6050bb2eb175ba5c42ddbc219

  • SSDEEP

    24576:K6zNoTSbZeCfGY+NR+5oRWJuK09yJ1oVQcJr7KkiqXc1+vi:Qwzg1RC09RVQct7Kkigc1+vi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 611acf487ea2d3fc6be3dbffffa93182_JaffaCakes118
    .rar
  • eraser_v5.8c1.3_4.exe
    .exe windows:4 windows x86 arch:x86

    8ae4c4415f8b76a5573f954408eb7f1a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ASUpdate.dll
    .dll windows:4 windows x86 arch:x86

    56cbecc9df5b9c13b50d1dc6afaac7b9


    Headers

    Imports

    Exports

    Sections

  • ERASER.HLP
  • Eraser.cnt
  • Eraser.dll
    .dll windows:4 windows x86 arch:x86

    bcf98506f04158dae0563f1cc6464c37


    Headers

    Imports

    Exports

    Sections

  • Eraser.exe
    .exe windows:4 windows x86 arch:x86

    a7c91099029d534eaac0cb39aeb5129d


    Headers

    Imports

    Sections

  • Eraserl.exe
    .exe windows:4 windows x86 arch:x86

    1327769c7620260ccd55346dc51e3b94


    Headers

    Imports

    Sections

  • Erasext.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    25f80ff78d75bedf7db441757bd03360


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    8ae4c4415f8b76a5573f954408eb7f1a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • Verify.exe
    .exe windows:4 windows x86 arch:x86

    65b4a3838fba42cb5ebe83d92e0417c8


    Headers

    Imports

    Sections

  • eraser.exe
    .exe windows:4 windows x86 arch:x86

    a7c91099029d534eaac0cb39aeb5129d


    Headers

    Imports

    Sections

  • eraser.xml
    .xml
  • eraserd.exe
  • history.txt
  • readme.txt
  • 安装说明.url
    .url