Overview

overview

7

Static

static

3

831ed626a8...18.exe

windows7-x64

7

831ed626a8...18.exe

windows10-2004-x64

7

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...pt.dll

windows7-x64

3

$PLUGINSDI...pt.dll

windows10-2004-x64

3

$SYSDIR/ad...ve.exe

windows7-x64

7

$SYSDIR/ad...ve.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$_5_.dll

windows7-x64

6

$_5_.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    831ed626a82c19194f28a8f27e42fdbf_JaffaCakes118

  • Size

    330KB

  • MD5

    831ed626a82c19194f28a8f27e42fdbf

  • SHA1

    51a9167bc5b7b3bec7d457fdd74dd25ea90b2959

  • SHA256

    a6159c7bf6fdf61f81fa4769249d31ecd9718811f403c245e6e7ec76d2b2b956

  • SHA512

    e9f949ae24235f103aee29479f0ed3e8a56d1dd0e210f63b501a99e44639c6b1416c825ebf8969075fa67c654b57dc2b34aec8c67375c16bcc5bc3ad81b17f32

  • SSDEEP

    6144:WXnJeO+sS0ZzKBLxKUHezv67Hi7cGJf1ZnQ2i9MXwTQzH:GA0ZzIsz4HycsNEQj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 831ed626a82c19194f28a8f27e42fdbf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    fedb8e95b3698a6c05b69204d3c2de7a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsBrowserOpt.dll
    .dll windows:5 windows x86 arch:x86

    486ce976f8d3cc3ada80177f5d315120


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/adzgalore-remove.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    0dd66824726715358a99b2af20e0b80a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $_5_
    .dll regsvr32 windows:5 windows x86 arch:x86

    ad090cc92ba62ac8f0b09d85e39af1a3


    Headers

    Imports

    Exports

    Sections