Overview

overview

7

Static

static

3

6a774d2c6b...18.exe

windows7-x64

7

6a774d2c6b...18.exe

windows10-2004-x64

7

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

AutoUpdateClient.exe

windows7-x64

3

AutoUpdateClient.exe

windows10-2004-x64

3

CfgSet.dll

windows7-x64

3

CfgSet.dll

windows10-2004-x64

3

Chart.dll

windows7-x64

3

Chart.dll

windows10-2004-x64

3

DasTrader.exe

windows7-x64

3

DasTrader.exe

windows10-2004-x64

3

EsData.dll

windows7-x64

3

EsData.dll

windows10-2004-x64

3

HotKey.pdf

windows7-x64

3

HotKey.pdf

windows10-2004-x64

3

LangPack.dll

windows7-x64

3

LangPack.dll

windows10-2004-x64

3

SkinMagic.dll

windows7-x64

3

SkinMagic.dll

windows10-2004-x64

3

ToolBar.dll

windows7-x64

3

ToolBar.dll

windows10-2004-x64

3

UpdateClient.exe

windows7-x64

3

UpdateClient.exe

windows10-2004-x64

3

XCrashReport.exe

windows7-x64

3

XCrashReport.exe

windows10-2004-x64

3

daszip.dll

windows7-x64

3

daszip.dll

windows10-2004-x64

3

help.exe

windows7-x64

7

help.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a774d2c6bb1c8487166e1e9dcfbd833_JaffaCakes118

  • Size

    4.0MB

  • MD5

    6a774d2c6bb1c8487166e1e9dcfbd833

  • SHA1

    be325cf447a82d327f188548b38ce3f3d526dad0

  • SHA256

    30274c2d679e93455318eda9e660e50873f5c633e3221dcef8712000e8f6b2bd

  • SHA512

    07007f518dd23383adf275969ff3b012ab612c628d92cc28333436f6caec3e19d9eb7cedd301bf6cee15ab483b9ac37f3da4cb1e3a725dc51bf5c5ead35ae2de

  • SSDEEP

    98304:A33fzMYY85a3uuLI5GEyz9ruylh9Isu/hSyMki:Afz3Y8E3uuL1JruylhO/hSyMh

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 6a774d2c6bb1c8487166e1e9dcfbd833_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_logon.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Alert.xml
  • AutoUpdateClient.exe
    .exe windows:4 windows x86 arch:x86

    35ead4b5e1458c37b89fb0f178c85b32


    Headers

    Imports

    Sections

  • Baskets/BasketLoadBlank.csv
  • Baskets/BasketLoadExample.csv
  • Baskets/OILPair.csv
  • Baskets/StopOrderExample.csv
  • CfgSet.dll
    .dll windows:4 windows x86 arch:x86

    3aa65d3b96a61a3e65d250130ad56228


    Headers

    Imports

    Exports

    Sections

  • Chart.dll
    .dll windows:4 windows x86 arch:x86

    6cad7c68748bdc0d36ac9891abd25ec7


    Headers

    Imports

    Exports

    Sections

  • DASLPEN.LP
  • DASLPRU.LP
  • DASLPZH.LP
  • DEMO.bmp
  • DasTrader.exe
    .exe windows:4 windows x86 arch:x86

    e77df0fe2ddd414cc5fbdc0f3f1142b3


    Headers

    Imports

    Sections

  • EsData.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    396a5b793a1e7b22bd197c27e5c1a513


    Headers

    Imports

    Exports

    Sections

  • HotKey.pdf
    .pdf

    • http://finance.yahoo.com/q/pr?s=%SYMB%

    • http://www.nasdaqtrader.com/trader/tradingservices/productservices/productdescriptions/inet/rash_strategy.pdf

  • LangPack.dll
    .dll windows:4 windows x86 arch:x86

    ba3cbeae95034d68eed73c0a37f6fb71


    Headers

    Imports

    Exports

    Sections

  • SkinMagic.dll
    .dll windows:5 windows x86 arch:x86

    54ad01f313763748bf513983a2f90c91


    Headers

    Imports

    Exports

    Sections

  • ToolBar.dll
    .dll windows:4 windows x86 arch:x86

    211e569824d55142620139b99f60b842


    Headers

    Imports

    Exports

    Sections

  • UpdateClient.exe
    .exe windows:4 windows x86 arch:x86

    c192fcb5f4d1a28dda9c5ac4bc9e7dfb


    Headers

    Imports

    Sections

  • XCrashReport.exe
    .exe windows:4 windows x86 arch:x86

    4426aec0d1570cfcb5cb511306cf9f9f


    Headers

    Imports

    Sections

  • config.cfg
  • config.fix
  • configEX.cfg
  • daszip.dll
    .dll windows:4 windows x86 arch:x86

    e2281814a348ffd3c597b8b36417b15c


    Headers

    Imports

    Exports

    Sections

  • default.dsk
  • disclaimer.jpg
    .jpg
  • help.exe
    .exe windows:4 windows x86 arch:x86

    a80ed6af7f54152c3fdabd75bac9e2b3


    Headers

    Imports

    Sections

  • hotkey.htk
  • hotkey.xml
    .xml
  • mfc42.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    15526a399efc54049f061e8ef6944ab3


    Headers

    Imports

    Exports

    Sections

  • mfc42u.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    855ebb3c0f80df58639691b07a754ace


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • theme/DAS_Black.smf
  • theme/DAS_Blue.smf
  • theme/DAS_Graphene.smf
  • theme/DAS_Green.smf
  • theme/DAS_Orange.smf
  • theme/DAS_Purple.smf
  • theme/DAS_Red.smf
  • theme/DAS_Umber.smf
  • theme/DAS_White.smf
  • theme/DAS_Yellow.smf
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    2d3ee679b3fa7146dcc780f76415ad2e


    Headers

    Imports

    Exports

    Sections