Overview

overview

3

Static

static

3

76c6ac643b...18.exe

windows7-x64

3

76c6ac643b...18.exe

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/nswg.dll

windows7-x64

3

$PLUGINSDIR/nswg.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    76c6ac643bd7501392f81eaf2382190c_JaffaCakes118

  • Size

    206KB

  • MD5

    76c6ac643bd7501392f81eaf2382190c

  • SHA1

    15e6151f40dc5e5aee9b3f50c093122d96d22ddc

  • SHA256

    28324eab8d5b03254d3a923a6c6a054250638bcef629611385b82fecdb740388

  • SHA512

    40a449db10f9ba28117a1d62e4f9312a2f5b5b173007ec49fd0ae47f56994d40cc3f5ba7a278f42f55d4aa2b0a49bf3c60251e0d15da1fe7539fa0bf1073f313

  • SSDEEP

    3072:BQIURTXJ9nHSDAEc8OUW6D6/OP78vU8p48cKtgr8iRNydea+Lpc01e7ux7+57axQ:BsfnyAsl6/OP72U8m8cCK3Nydm0uxpxQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 76c6ac643bd7501392f81eaf2382190c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Background.png
    .png
  • $PLUGINSDIR/InetLoadEx.dll
    .dll windows:5 windows x86 arch:x86

    999c0f7645164521b950b822906fa062


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Progress.dll
    .dll windows:5 windows x86 arch:x86

    a69514795c7cde48357cbe091be0aadc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:5 windows x86 arch:x86

    8ef047e6217a2c4c5df9deca3b97460c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nswg.dll
    .dll windows:5 windows x86 arch:x86

    8bf8bda2787bf4acaa6b0939cff192da


    Headers

    Imports

    Exports

    Sections