Overview

overview

7

Static

static

3

663beaed8d...18.exe

windows7-x64

7

663beaed8d...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$SYSDIR/cfx32.dll

windows7-x64

1

$SYSDIR/cfx32.dll

windows10-2004-x64

1

TestingMaster.exe

windows7-x64

3

TestingMaster.exe

windows10-2004-x64

3

libeay32.dll

windows7-x64

1

libeay32.dll

windows10-2004-x64

1

logger.dll

windows7-x64

1

logger.dll

windows10-2004-x64

1

testingmaster.chm

windows7-x64

1

testingmaster.chm

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

wrcore.dll

windows7-x64

1

wrcore.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    663beaed8d7a5d6b7f152d0b5b5ae20d_JaffaCakes118

  • Size

    1.4MB

  • MD5

    663beaed8d7a5d6b7f152d0b5b5ae20d

  • SHA1

    64d102eb277d6f7bd21cd82db6082f6c8449cd1d

  • SHA256

    221308e2e12588a3fd4c54d9d6932d25abfb85e596dcb43b3a2acb8ce2d6033f

  • SHA512

    4696dc40f86a884f6bed9ea304a51c958379226cf307fed110deeca23ebfebc37dad6abde1ca08b5fd803400f3e57b20108896006490eecc14cb67906c3c2307

  • SSDEEP

    24576:hTpPIgqwHUsQBzDwas3oeRF/UAKLFNXYHRZ7JhgpkNX8e1enhJ09Kwiu:lpAgRYyZRFaFNXYHRmCd5WJ0yu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 663beaed8d7a5d6b7f152d0b5b5ae20d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    6bc108eed3ca99f68adee56e9c99fac6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/testingmaster.ini
  • $SYSDIR/CFX32.LIC
  • $SYSDIR/cfx32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    a43fba7f27b8132c0e4b5ffa61797648


    Headers

    Imports

    Exports

    Sections

  • TestingMaster.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    574b96e9a07cceef78f2bba02197adcf


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • logger.dll
    .dll windows:4 windows x86 arch:x86

    4456795e2b94de8a9d52b079fb546444


    Headers

    Imports

    Exports

    Sections

  • testingmaster.chm
    .chm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • wrcore.dll
    .dll windows:4 windows x86 arch:x86

    f6131372e1794a2522faa0aba3b8bbe0


    Headers

    Imports

    Exports

    Sections