Overview

overview

3

Static

static

3

645ba74d05...18.exe

windows7-x64

3

645ba74d05...18.exe

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PROGRAMFI...R1.dll

windows7-x64

1

$PROGRAMFI...R1.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    645ba74d0560c81c2da58a6f667d5074_JaffaCakes118

  • Size

    422KB

  • MD5

    645ba74d0560c81c2da58a6f667d5074

  • SHA1

    1dfecc73082f16fc1b9b112b4a6d940771b5471a

  • SHA256

    c810095c3a90ab0e2838f2b3f22f7271a5aa1a21d91984f63fcb43960698eaef

  • SHA512

    f92e916453a790b4e0225759f083abfc39fe046ff0b00463174f212d25eea8a16529b071c00c0b14b33e701c3dfb590da394e76f84e87e720901c77d94c9926d

  • SSDEEP

    12288:Ybcb/1yrm+wcv38WJLOgqOa+IZHXA6q43jF:YIbG3tfDJLOg1m3A+R

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 645ba74d0560c81c2da58a6f667d5074_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2274cc1534607459cdd304a928601ef9


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Mozilla Firefox/$R1
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections