Overview

overview

7

Static

static

3

662a708f13...18.exe

windows7-x64

7

662a708f13...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

SearchGreen.dll

windows7-x64

6

SearchGreen.dll

windows10-2004-x64

6

SearchGree...te.exe

windows7-x64

3

SearchGree...te.exe

windows10-2004-x64

3

data/uninstall.exe

windows7-x64

7

data/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

1

$PLUGINSDI...ll.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    662a708f13847e447293a95845acb4a2_JaffaCakes118

  • Size

    353KB

  • MD5

    662a708f13847e447293a95845acb4a2

  • SHA1

    095d7d0e3296d53fa819d5a3111fbc1c6436f7e8

  • SHA256

    2ebae20967c8053cb4f1c16dabf55cda3953fbb07f55c08855e11c5b1247ea1d

  • SHA512

    ad4f9edaab3a7949c315ec2902944b6b1ced0e054a4eaf6a6f475fbba9949dfbe7a245694d359d42a726af9a4d59a9326ad77ed0417bebfa53deffc5a415ea1c

  • SSDEEP

    6144:xNp5gKSdlsaQmeLbbxuF69XCzburDGpVsTyOVqDB9twMGs7ZErxrP9z5:nkJPOxI9ynGp2mOVqDB9t4+Et99

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 662a708f13847e447293a95845acb4a2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    80686d0ea5c37412830430f56f2823c2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • SearchGreen.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    de5403015515ac0a3d9c55fdabb5f51a


    Headers

    Imports

    Exports

    Sections

  • SearchGreen_update.exe
    .exe windows:4 windows x86 arch:x86

    dc93ce5f875e19cc509abd68431f9d88


    Headers

    Imports

    Sections

  • data/link.dat
  • data/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp