Overview

overview

7

Static

static

3

661793f6ff...18.exe

windows7-x64

7

661793f6ff...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/cnclb.dll

windows7-x64

1

$PLUGINSDIR/cnclb.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PROGRAMFI...st.dll

windows7-x64

1

$PROGRAMFI...st.dll

windows10-2004-x64

1

$PROGRAMFI...ase.js

windows7-x64

3

$PROGRAMFI...ase.js

windows10-2004-x64

3

$PROGRAMFI...lgc.js

windows7-x64

3

$PROGRAMFI...lgc.js

windows10-2004-x64

3

$PROGRAMFI...s.html

windows7-x64

1

$PROGRAMFI...s.html

windows10-2004-x64

1

$PROGRAMFI.../mt.js

windows7-x64

3

$PROGRAMFI.../mt.js

windows10-2004-x64

3

$PROGRAMFI...ore.js

windows7-x64

3

$PROGRAMFI...ore.js

windows10-2004-x64

3

$PROGRAMFI...ref.js

windows7-x64

3

$PROGRAMFI...ref.js

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/cnclb.dll

windows7-x64

1

$PLUGINSDIR/cnclb.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    661793f6ff216f92a4a2824072b54cc2_JaffaCakes118

  • Size

    921KB

  • MD5

    661793f6ff216f92a4a2824072b54cc2

  • SHA1

    f673e45d2d35c8532cec609bbe0225ada0c56b20

  • SHA256

    1a9d5956946161655b3e66c71efdb4944a9cfd98c52369c4692fa3bfabfff591

  • SHA512

    36fd06ced09900f5b978063819c9d15e2d94f840871b59292d6783a1d6b43602fcb50f0e4f8007b03447cbc884d97ef63aa8b00cc419933244e02aefeb189cf5

  • SSDEEP

    24576:oMYtt1RM+LP/cQ6SjTqp3LYm1HnkyvucauPVG/PQCPtHYfJbSHT:EBMkBGF0m1Hnp2cE/4C1YBCT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs
    installer

Files

  • 661793f6ff216f92a4a2824072b54cc2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    6bc108eed3ca99f68adee56e9c99fac6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/cnclb.dll
    .dll windows:4 windows x86 arch:x86

    7cce36b29e8100018a97842db8bfa1b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    c193ea402999ea8ce8faa9fef22de03d


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/chrome.manifest
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/components/FFHst.dll
    .dll windows:4 windows x86 arch:x86

    42265262b1570e7f94a9fb42ce88043e


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/components/FFHst.xpt
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/content/ffxBase.js
    .js
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/content/ffxtlbr.xul
    .xml
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/content/instlgc.js
    .js
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/content/it_ffxSrchRslts.html
    .js
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/content/mt.js
    .js
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/content/mtCore.js
    .js
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/content/vssver.scc
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/defaults/preferences/instlPref.js
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/defaults/preferences/vssver.scc
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/install.rdf
    .xml
  • $PROGRAMFILES/Mozilla Firefox/extensions/[email protected]/vssver.scc
  • $PROGRAMFILES/Mozilla Firefox/searchplugins/Recfree.xml
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    6bc108eed3ca99f68adee56e9c99fac6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/cnclb.dll
    .dll windows:4 windows x86 arch:x86

    7cce36b29e8100018a97842db8bfa1b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • recfree.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    87dd083a14489044a504962f9a83fcf5


    Headers

    Imports

    Exports

    Sections

  • recfreeApp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6a582cfd515cbeff9157afce84ba6f62


    Headers

    Imports

    Exports

    Sections

  • recfreeEng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    76078519e9116d5bd9447b55df982069


    Headers

    Imports

    Exports

    Sections

  • recfreeTlbr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    91dbbd8961b1a205b4d51a9f8c101b9f


    Headers

    Imports

    Exports

    Sections

  • recfreesafe.dat
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    6bc108eed3ca99f68adee56e9c99fac6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/cnclb.dll
    .dll windows:4 windows x86 arch:x86

    7cce36b29e8100018a97842db8bfa1b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp