Overview

overview

7

Static

static

3

6a3de0520a...18.exe

windows7-x64

7

6a3de0520a...18.exe

windows10-2004-x64

7

$APPDATA/s..._s.exe

windows7-x64

7

$APPDATA/s..._s.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

SawTv.exe

windows7-x64

6

SawTv.exe

windows10-2004-x64

6

SawTvN.exe

windows7-x64

3

SawTvN.exe

windows10-2004-x64

3

modern.exe

windows7-x64

3

modern.exe

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a3de0520ac38712afe3523946f7107f_JaffaCakes118

  • Size

    559KB

  • MD5

    6a3de0520ac38712afe3523946f7107f

  • SHA1

    1b3fb33f7319167cccf821f91f150d34e45c963c

  • SHA256

    f9ac94cd271a0fbf49619c187398c7699bb1c87b765825a42127ed5f8fb21314

  • SHA512

    fea80b69bc97acda2609a64675ce66c7c3ed69569420073e37a2dad83b99f8f6b1b3b4f871c930cf89eb7f8f06dcee81efaa234c49221029dd18de2f8c0916b4

  • SSDEEP

    12288:DIvt41oUSr5L7nN6iMVW0RUO3Hn/fSHVHvaCHtpa1YEwKnwQXk:DitLUSFXm4mUIH/KHVH/KRwKnwt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs
    installer

Files

  • 6a3de0520ac38712afe3523946f7107f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $APPDATA/sawtvi/SawTv_s.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    1e9621cfcd4ae80e95c364e38bcff5d7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • License.txt
  • SawTv.exe
    .exe windows:4 windows x86 arch:x86

    74eecc53194897d926b2c3524f084f17


    Headers

    Imports

    Sections

  • SawTvN.exe
    .exe windows:4 windows x86 arch:x86

    0f5e9c376dff7b9c885810d9cb97e0b5


    Headers

    Imports

    Sections

  • ad.ini
  • image/back_bt_default.bmp
  • image/back_bt_down.bmp
  • image/back_bt_over.bmp
  • image/bg_main.bmp
  • image/bottom_dot.bmp
  • image/bottom_left.bmp
  • image/bottom_right.bmp
  • image/bt_change_down.bmp
  • image/bt_change_nomal.bmp
  • image/bt_change_over.bmp
  • image/bt_del_down.bmp
  • image/bt_del_nomal.bmp
  • image/bt_del_over.bmp
  • image/bt_insert_down.bmp
  • image/bt_insert_nomal.bmp
  • image/bt_insert_over.bmp
  • image/center_dot.bmp
  • image/channel_home_default.bmp
  • image/channel_home_default_on.bmp
  • image/channel_home_over.bmp
  • image/channel_my_default.bmp
  • image/channel_my_default_on.bmp
  • image/channel_my_over.bmp
  • image/channel_radio_default.bmp
  • image/channel_radio_default_on.bmp
  • image/channel_radio_over.bmp
  • image/channel_tv_default.bmp
  • image/channel_tv_default_on.bmp
  • image/channel_tv_over.bmp
  • image/channel_ucc_default.bmp
  • image/channel_ucc_default_on.bmp
  • image/channel_ucc_over.bmp
  • image/channerno_bt_default.bmp
  • image/channerno_bt_down.bmp
  • image/channerno_bt_over.bmp
  • image/channerok_bt_default.bmp
  • image/channerok_bt_down.bmp
  • image/channerok_bt_over.bmp
  • image/channeryes_bt_default.bmp
  • image/channeryes_bt_down.bmp
  • image/channeryes_bt_over.bmp
  • image/close_bt_default.bmp
  • image/close_bt_down.bmp
  • image/close_bt_over.bmp
  • image/front_bt_default.bmp
  • image/front_bt_down.bmp
  • image/front_bt_over.bmp
  • image/left_dot.bmp
  • image/listbg.bmp
  • image/listbg_down.bmp
  • image/listbgbottom.bmp
  • image/listdown_bg.bmp
  • image/listdown_bt_default.bmp
  • image/listdown_bt_down.bmp
  • image/listdown_bt_over.bmp
  • image/listhide_default.bmp
  • image/listhide_over.bmp
  • image/listshow_default.bmp
  • image/listshow_over.bmp
  • image/maximize_bt_default.bmp
  • image/maximize_bt_down.bmp
  • image/maximize_bt_over.bmp
  • image/minimize_bt_default.bmp
  • image/minimize_bt_down.bmp
  • image/minimize_bt_over.bmp
  • image/msg_box_center.bmp
  • image/msg_box_left.bmp
  • image/msg_box_right.bmp
  • image/play_bt_default.bmp
  • image/play_bt_down.bmp
  • image/play_bt_over.bmp
  • image/right_dot.bmp
  • image/soundbar_dot.bmp
  • image/soundbar_line.bmp
  • image/soundoff_default.bmp
  • image/soundoff_over.bmp
  • image/soundon_default.bmp
  • image/soundon_over.bmp
  • image/stop_bt_default.bmp
  • image/stop_bt_down.bmp
  • image/stop_bt_over.bmp
  • image/top_dot.bmp
  • image/top_left.bmp
  • image/top_right.bmp
  • image/uccsearch_bt_default.bmp
  • image/uccsearch_bt_down.bmp
  • image/uccsearch_bt_over.bmp
  • image/view_logo.bmp
  • modern.exe
    .exe windows:4 windows x86 arch:x86

    26e8aef7b14d9423a32584cd8f712ad1


    Headers

    Imports

    Sections

  • radiochinfo.ini
  • radiolistinfo.ini
  • tvchinfo.ini
  • tvlistinfo.ini
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    1e9621cfcd4ae80e95c364e38bcff5d7


    Headers

    Imports

    Exports

    Sections