Overview

overview

7

Static

static

3

6747778364...18.exe

windows7-x64

7

6747778364...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

32/npbhp.dll

windows7-x64

6

32/npbhp.dll

windows10-2004-x64

6

32/npinstaller.exe

windows7-x64

1

32/npinstaller.exe

windows10-2004-x64

1

32/npup.dll

windows7-x64

1

32/npup.dll

windows10-2004-x64

1

64/npbhp.dll

windows7-x64

7

64/npbhp.dll

windows10-2004-x64

7

64/npinstaller.exe

windows7-x64

1

64/npinstaller.exe

windows10-2004-x64

1

64/npup.dll

windows7-x64

1

64/npup.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6747778364ae473f3891936dff96bea7_JaffaCakes118

  • Size

    470KB

  • MD5

    6747778364ae473f3891936dff96bea7

  • SHA1

    4d6bde0585af55ce502ab0d8e156137134e4c33f

  • SHA256

    cc33f9312b988cb8799d3cce11075b4a11c2430117462a50382d58ce015ee87c

  • SHA512

    d8413c9de1d8d1a1cc6b03a7f6fa592854c7c7bb76aad31bab2adbb1f3aeb55d6bd1ea1f4c2b6a8c04454551ef923761c9a2767eb309d23a03ef080fe16e1488

  • SSDEEP

    12288:FkdPzFi0q43amIzmxzITNO2ERSilJzLt51PX:FKPzO4smxIpOm2Rv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 6747778364ae473f3891936dff96bea7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 32/npbhp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    11fb31abb9ce12174e09d7760241988d


    Headers

    Imports

    Exports

    Sections

  • 32/npinstaller.exe
    .exe windows:5 windows x86 arch:x86

    bbe305929564a22ac36da64121482c97


    Headers

    Imports

    Sections

  • 32/npup.dll
    .dll windows:5 windows x86 arch:x86

    96bf2af36f5511a619bb0d339bdbddcc


    Headers

    Imports

    Exports

    Sections

  • 64/npbhp.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    61a7e6464aa6e7f3522908da771b64fc


    Headers

    Imports

    Exports

    Sections

  • 64/npinstaller.exe
    .exe windows:5 windows x64 arch:x64

    5623b5801de2603b3aa2a2b730017353


    Headers

    Imports

    Sections

  • 64/npup.dll
    .dll windows:5 windows x64 arch:x64

    3dff7b0d8f3681910ea011bb958224e8


    Headers

    Imports

    Exports

    Sections