Overview

overview

7

Static

static

3

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

SpyWareNukerXT.exe

windows7-x64

7

SpyWareNukerXT.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...lX.dll

windows7-x64

3

$PLUGINSDI...lX.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

AvHelp.dll

windows7-x64

3

AvHelp.dll

windows10-2004-x64

3

SumSetup.exe

windows7-x64

7

SumSetup.exe

windows10-2004-x64

7

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

StartUpManager.chm

windows7-x64

1

StartUpManager.chm

windows10-2004-x64

1

StartupManager.exe

windows7-x64

3

StartupManager.exe

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

au.dll

windows7-x64

3

au.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    82b3f1ea39fb2e0869d85d984c552d02_JaffaCakes118

  • Size

    9.1MB

  • MD5

    82b3f1ea39fb2e0869d85d984c552d02

  • SHA1

    dd335598531a462b7ce59eafc88094a0aea1c4ea

  • SHA256

    a224f4e2ef3e36fc8d730c660659fea62de292177397de80d30349ebc1fa7f99

  • SHA512

    e7b9bfe98b7a8db039248471c1605c89579ac84d5c24f3a163ec71db4d26f77d4bcc869ce5c8c9eb02669ba76b5654ef09afccc28359979191b5e0ccb956591f

  • SSDEEP

    196608:oQgbjGwUEpJGaLFoVOB3y2Q+/DFL4CDzVBMHInCYkwV/tp7UA4syh:c/UE/z3y2Q+/JcIzIonp349

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs
    installer

Files

  • 82b3f1ea39fb2e0869d85d984c552d02_JaffaCakes118
    .rar
  • 155绿色软件站.url
    .url
  • SpyWareNukerXT.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallX.dll
    .dll windows:4 windows x86 arch:x86

    5c38cb7ec6746a0e2706bc5272d21696


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/finish_page.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/swn_sum.ini
  • $PLUGINSDIR/thankyou_page.ini
  • AvHelp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SumSetup.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallerUtils.dll
    .dll windows:4 windows x86 arch:x86

    558c809eeacc192bb5a15c618ddd90de


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • StartUpManager.chm
    .chm
  • StartupManager.exe
    .exe windows:4 windows x86 arch:x86

    a0c4162c0855c43abe5d60b34713c6f9


    Headers

    Imports

    Sections

  • startup.ico
  • uninst.ico
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallerUtils.dll
    .dll windows:4 windows x86 arch:x86

    558c809eeacc192bb5a15c618ddd90de


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    48cfa0ea7e353e4a7dd23572da8374ef


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • au.dll
    .dll windows:4 windows x86 arch:x86

    d7ccc5c4dc65c6da2385efa6f28a624d


    Headers

    Imports

    Sections

  • augui.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • avcore.dll
    .dll windows:4 windows x86 arch:x86

    bede9aa7917ad6e40c29a99227d0d45a


    Headers

    Imports

    Sections

  • delfile.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hlib.dll
    .dll windows:4 windows x86 arch:x86

    ddb4c9ac191abd4ac45584b56924a70b


    Headers

    Imports

    Sections

  • lang/master_es.lx
  • reg2.dll
    .dll windows:4 windows x86 arch:x86

    e138c4e6473122a449cdae116d26d30a


    Headers

    Imports

    Sections

  • shields.dat
  • swnxt.chm
    .chm
  • swnxt.da2
  • swnxt.dat
  • swnxt.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • unicows.dll
    .dll windows:6 windows x86 arch:x86

    785d5607ed2f18f4ea0be5809350b169


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • crack.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections