Overview

overview

3

Static

static

3

6fb1d557ff...18.exe

windows7-x64

3

6fb1d557ff...18.exe

windows10-2004-x64

3

$0/basicscan.dll

windows7-x64

1

$0/basicscan.dll

windows10-2004-x64

1

$0/uninstall.exe

windows7-x64

3

$0/uninstall.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6fb1d557ff21f4d7d8be36359a7c979b_JaffaCakes118

  • Size

    967KB

  • MD5

    6fb1d557ff21f4d7d8be36359a7c979b

  • SHA1

    a047da01a106bd9e6f4b9e7226ad5b9b356e3b16

  • SHA256

    afd7128789d8df5c809df18de42c35db8a8ae27a20b36d4a455957fdc66a06df

  • SHA512

    287acc47b3878dc2b1a53244b8e16740548d48e46e215884e41723f9380ce74b1d1285fcdd55026d0f8df7cf1cb57ef50a5c95d7e70521545d12dc204492b7cb

  • SSDEEP

    24576:pSoKHmNLC4cMCdlvqMVq98HOvr3PIJ9aRzrMqD8a3gDGakGQgOUA5EFo92u:IFGNvCPvqAC88r3PuURsqmcGQUyEFof

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 6fb1d557ff21f4d7d8be36359a7c979b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/basicscan.dll
  • $0/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp