Overview

overview

7

Static

static

4

723f5d444d...18.exe

windows7-x64

7

723f5d444d...18.exe

windows10-2004-x64

7

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

EULA.html

windows7-x64

3

EULA.html

windows10-2004-x64

3

Imagenomic...le.dll

windows7-x64

3

Imagenomic...le.dll

windows10-2004-x64

3

Imagenomic...64.dll

windows7-x64

1

Imagenomic...64.dll

windows10-2004-x64

1

Portraiture.dll

windows7-x64

3

Portraiture.dll

windows10-2004-x64

3

Portraiture64.dll

windows7-x64

1

Portraiture64.dll

windows10-2004-x64

1

Portraitur...de.pdf

windows7-x64

3

Portraitur...de.pdf

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    723f5d444d5c8d1df2507eabfdadc91b_JaffaCakes118

  • Size

    3.5MB

  • MD5

    723f5d444d5c8d1df2507eabfdadc91b

  • SHA1

    822946f1d462ddea97e157127e0f5c571bba7e8c

  • SHA256

    9134e1954c1e48e7049fc1845946e7bd0786bd8f80cf729e248197bdd4779141

  • SHA512

    46cd49ff4a653c6790acc09effff3e624d76236df9de3a338b09ce084006029ee02bd737f6b9da75db9f0e099e7331ad427117c995756cb6775ae484b5e40fb1

  • SSDEEP

    98304:39lPE+DAcjr+e9mAoAsqhbJjUFfMdlCjBPQTyr:3DPFrmAoAs6NjUF0fCjGTe

Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 723f5d444d5c8d1df2507eabfdadc91b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    4364d928a98ebbc94aa9916b60a4de94


    Headers

    Imports

    Exports

    Sections

  • EULA.html
    .html
  • ImagenomicPluginConsole.8li
    .dll windows:4 windows x86 arch:x86

    e03ff845a253d2283314178dac0d7926


    Headers

    Imports

    Exports

    Sections

  • ImagenomicPluginConsole64.8li
    .dll windows:4 windows x64 arch:x64

    2096856a05b8ea394a97787c78498022


    Headers

    Imports

    Exports

    Sections

  • Portraiture.8bf
    .dll windows:4 windows x86 arch:x86

    39d0c3e5b301e6df4760a79d8270736b


    Headers

    Imports

    Exports

    Sections

  • Portraiture64.8bf
    .dll windows:4 windows x64 arch:x64

    d268401c508e86f3d18412feb7c47e96


    Headers

    Imports

    Exports

    Sections

  • PortraiturePluginUsersGuide.pdf
    .pdf

    • http://www.imagenomic.com/contact

    • http://www.imagenomic.com/support

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    4364d928a98ebbc94aa9916b60a4de94


    Headers

    Imports

    Exports

    Sections

  • uninst.ico