Overview
overview
7Static
static
3636483a07f...18.exe
windows7-x64
7636483a07f...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$R0.dll
windows7-x64
1$R0.dll
windows10-2004-x64
1$R2/NSIS.L...4_.exe
windows7-x64
1$R2/NSIS.L...4_.exe
windows10-2004-x64
1$TEMP/$R2/...4_.exe
windows7-x64
1$TEMP/$R2/...4_.exe
windows10-2004-x64
1General
-
Target
636483a07f2a22daa7a2ed6ddd6f7606_JaffaCakes118
-
Size
2.7MB
-
Sample
240722-qztm8a1dkk
-
MD5
636483a07f2a22daa7a2ed6ddd6f7606
-
SHA1
cb2dfc279cd9a97ec0c0dd46d8eacfcaea4b11a7
-
SHA256
fb6444ccdecd10532c68402dabf41141a25528d551e52ac1084045449b5f8bd3
-
SHA512
7c4d2f6f8d5cd425e4021f1a902a5b5bec42ab1a87ce9752ced3abc3e8b70f85be04c3b811fe687ffa6bd9fb6f5b3b6cb0fee1715b35af43a4c078dfa304ba07
-
SSDEEP
49152:793c1cyB+1sVpYQM8At++7dyZ1XIwaARu3Wrgb2ytk8Zu4QDViVmn:m1cyB+42QUJhm1Yiu3WraBVZu4FAn
Static task
static1
Behavioral task
behavioral1
Sample
636483a07f2a22daa7a2ed6ddd6f7606_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
636483a07f2a22daa7a2ed6ddd6f7606_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$R0.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$R0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$R2/NSIS.Library.RegTool.v2.$_4_.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
$R2/NSIS.Library.RegTool.v2.$_4_.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$TEMP/$R2/NSIS.Library.RegTool.v2.$_4_.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$TEMP/$R2/NSIS.Library.RegTool.v2.$_4_.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
636483a07f2a22daa7a2ed6ddd6f7606_JaffaCakes118
-
Size
2.7MB
-
MD5
636483a07f2a22daa7a2ed6ddd6f7606
-
SHA1
cb2dfc279cd9a97ec0c0dd46d8eacfcaea4b11a7
-
SHA256
fb6444ccdecd10532c68402dabf41141a25528d551e52ac1084045449b5f8bd3
-
SHA512
7c4d2f6f8d5cd425e4021f1a902a5b5bec42ab1a87ce9752ced3abc3e8b70f85be04c3b811fe687ffa6bd9fb6f5b3b6cb0fee1715b35af43a4c078dfa304ba07
-
SSDEEP
49152:793c1cyB+1sVpYQM8At++7dyZ1XIwaARu3Wrgb2ytk8Zu4QDViVmn:m1cyB+42QUJhm1Yiu3WraBVZu4FAn
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
06bef96b91bfa75b7f7817341a6cd597
-
SHA1
48a40368fc339ccea1dfda06d2e02bca7d7265c1
-
SHA256
2ca5590c85cc31285b83bbe569755d909d91b559db2d6ce3bca2fcc075225364
-
SHA512
5364d0944b4be215fb5d8bb8398e965ff6fa3190a962dd6c491984482321756017f89c2242d77ebcce6666c31fe54a956f2eb3a03a95d64121a1db462ad20a0d
-
SSDEEP
192:Q6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTtK72dwF7dBdcQOz:Q6JaVh4I5rpPbTt+BdhO
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
7e3c808299aa2c405dffa864471ddb7f
-
SHA1
b5de7804dd35ed7afd0c3b59d866f1a0749495e0
-
SHA256
91c47a9a54a3a8c359e89a8b4e133e6b7296586748ed3e8f4fe566abd6c81ddd
-
SHA512
599f61d5270227a68e5c4b8db41b5aa7bc17a4bbe91dd7336b410516fa6107f4f5bf0bbb3f6cc4b2e15b16bf9495fdc70832bab6262046cb136ad18f0c9b3738
-
SSDEEP
192:LO6dJA/ruAFEiUdWWE6hsD4YUdJfbub1awgMO:SKAFERdlxhTYUzqZaw
Score3/10 -
-
-
Target
$R0
-
Size
76KB
-
MD5
411aa5f9dfac793abe7f970d2f75b52a
-
SHA1
639e87c8e6970681bb91f6e039c63584abd5a3d5
-
SHA256
dda5a43a9e32c8530ad66b776c0353b7698c70b55efcd7ece58785b7fba3e5e2
-
SHA512
a43ef7fe83d4b8bbb8708d200b2914b15c203fcdbec364ed974747b551ecaa68f63d5ed5f89f0a21ec676b7c2cd114c7a22d581573fb30c1e2916ab7996e4ad7
-
SSDEEP
768:kzoHHt2WuO2//r8xyhwGMevmhZBR+sOagXbJx5kh+7E9bYQrXjkDWH1sFY3ARxd8:kzmN2WCMyyhYtrkfteYQHG
Score1/10 -
-
-
Target
$R2/NSIS.Library.RegTool.v2.$_4_.exe
-
Size
5KB
-
MD5
31c34a964f129e9a975fdd9e8148e32f
-
SHA1
c4d3c864eac5e93d7ba05333a2cfcb63fc6624f9
-
SHA256
f612e6c4caca566f5c5eb16462ff670d12dca611f6659e74fd579177a565337a
-
SHA512
504ce87247b198463610604b2ad182b6ead4f78578123064eec6840140e85e6b47987a1f0035dfc2d8d788ddb8d1e4770b1548367d76ddff0d6fcdbbe8b940c5
-
SSDEEP
96:ZFw199EdjXxf7FsS7bVs2ddqB4DDZH/6:g19CZfsS7bVbddqaHZH/
Score1/10 -
-
-
Target
$TEMP/$R2/NSIS.Library.RegTool.v2.$_4_.exe
-
Size
5KB
-
MD5
31c34a964f129e9a975fdd9e8148e32f
-
SHA1
c4d3c864eac5e93d7ba05333a2cfcb63fc6624f9
-
SHA256
f612e6c4caca566f5c5eb16462ff670d12dca611f6659e74fd579177a565337a
-
SHA512
504ce87247b198463610604b2ad182b6ead4f78578123064eec6840140e85e6b47987a1f0035dfc2d8d788ddb8d1e4770b1548367d76ddff0d6fcdbbe8b940c5
-
SSDEEP
96:ZFw199EdjXxf7FsS7bVs2ddqB4DDZH/6:g19CZfsS7bVbddqaHZH/
Score1/10 -