Overview

overview

7

Static

static

3

7706bde331...18.exe

windows7-x64

7

7706bde331...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...il.exe

windows7-x64

3

$PLUGINSDI...il.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

Control.exe

windows7-x64

3

Control.exe

windows10-2004-x64

3

RegDump.exe

windows7-x64

1

RegDump.exe

windows10-2004-x64

3

Sandbox.sys

windows7-x64

1

Sandbox.sys

windows10-2004-x64

1

SandboxieD...ch.exe

windows7-x64

3

SandboxieD...ch.exe

windows10-2004-x64

3

SandboxieExplorer.exe

windows7-x64

3

SandboxieExplorer.exe

windows10-2004-x64

3

SandboxieHelper.dll

windows7-x64

3

SandboxieHelper.dll

windows10-2004-x64

3

SandboxieHelper32.dll

windows7-x64

3

SandboxieHelper32.dll

windows10-2004-x64

3

SandboxieRpcSs.exe

windows7-x64

3

SandboxieRpcSs.exe

windows10-2004-x64

3

SandboxieServer.exe

windows7-x64

3

SandboxieServer.exe

windows10-2004-x64

3

SandboxieToolbar.dll

windows7-x64

6

SandboxieToolbar.dll

windows10-2004-x64

6

Start.exe

windows7-x64

3

Start.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7706bde3316f14ff91e211a624b7f4ea_JaffaCakes118

  • Size

    241KB

  • MD5

    7706bde3316f14ff91e211a624b7f4ea

  • SHA1

    7df712eb9da3d439dac48bf90ab90b18c336e3bc

  • SHA256

    58c6571f99a22defc7233e0032491e55dff3fbdcc756a5f62bdae8c7f19a86ed

  • SHA512

    db5241d84d8044909d22161504bf16a93064f680f9f44fdda4be9584535e2f5ee822091f8bc96fe030a48dc13b5924a14f90f62e4053f778271af49366bab515

  • SSDEEP

    6144:mv9WWVkN5xxZjTWlt054gKjmFrPKQRU3KdeKs2fgUWjo05uVGdc5UDUeyD:VxxZHWlCVK8rPe3KdeKseoIVcUHD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 7706bde3316f14ff91e211a624b7f4ea_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    73b73e00f465fa1a2a3bf6377a40219b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallType.ini
  • $PLUGINSDIR/KmdUtil.exe
    .exe windows:5 windows x86 arch:x86

    5a9d33a3c6cb6c8c267ed11df5b14402


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Warning.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Control.exe
    .exe windows:5 windows x86 arch:x86

    908a2ac6caedf2df3a83abc10037f0b6


    Headers

    Imports

    Sections

  • Control.exe.manifest
    .xml
  • LICENSE.TXT
  • RegDump.exe
    .exe windows:5 windows x86 arch:x86

    555e3a25050f6869e92695305831e451


    Headers

    Imports

    Sections

  • Sandbox.sys
    .sys windows:5 windows x86 arch:x86

    860a38cecc1cc67dcd327bfd8e378fab


    Headers

    Imports

    Sections

  • SandboxieDcomLaunch.exe
    .exe windows:5 windows x86 arch:x86

    8a35fc057a3bb83a78d99e61f50acb59


    Headers

    Imports

    Sections

  • SandboxieExplorer.exe
    .exe windows:5 windows x86 arch:x86

    52934f70372b999b86bbe1fb789c15cc


    Headers

    Imports

    Sections

  • SandboxieHelper.dll
    .dll windows:5 windows x86 arch:x86

    2f83e905c0ef6560a12ec2e87ec1ce43


    Headers

    Imports

    Exports

    Sections

  • SandboxieHelper32.dll
    .dll windows:5 windows x86 arch:x86

    2f83e905c0ef6560a12ec2e87ec1ce43


    Headers

    Imports

    Exports

    Sections

  • SandboxieRpcSs.exe
    .exe windows:5 windows x86 arch:x86

    f01e8ab94f2501615e02068b03577b16


    Headers

    Imports

    Sections

  • SandboxieServer.exe
    .exe windows:5 windows x86 arch:x86

    a92b1c9ab42c5fd91cd9ca8001956e71


    Headers

    Imports

    Sections

  • SandboxieToolbar.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c1ab6229cb342c0e3b633cd2430c15cb


    Headers

    Imports

    Exports

    Sections

  • Start.exe
    .exe windows:5 windows x86 arch:x86

    c723f845a639852938b694999aaeb4be


    Headers

    Imports

    Sections