Overview

overview

7

Static

static

3

836ccc241a...18.exe

windows7-x64

7

836ccc241a...18.exe

windows10-2004-x64

7

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...pt.dll

windows7-x64

3

$PLUGINSDI...pt.dll

windows10-2004-x64

3

$SYSDIR/dc...ve.exe

windows7-x64

7

$SYSDIR/dc...ve.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$_5_.dll

windows7-x64

6

$_5_.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    836ccc241a40aa427e0f377216d6571c_JaffaCakes118

  • Size

    331KB

  • MD5

    836ccc241a40aa427e0f377216d6571c

  • SHA1

    3357e2a80f3f1b402f639f8c3c4e7bd02c97006c

  • SHA256

    ab0f5dc09d11f0effcb669153ccb590a9f582a92fbf180f47388555e3e1b3758

  • SHA512

    16ea7c2bfc22684b37334d5e1b5a8ab5443b62764e1decbcb192addb458dc6de5123d4f322962ce0814d5bebcc3db53101bdd9fdf8a0c9ec756aa84e742346c0

  • SSDEEP

    6144:WXyKWN1xY85UHOs6CNfXS5alH0dWCAWN3ZBIsCk87M4IHFCdpytYP:v11xY85ns6gM0H0dlFJpjCMZCPKYP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 836ccc241a40aa427e0f377216d6571c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    fedb8e95b3698a6c05b69204d3c2de7a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsBrowserOpt.dll
    .dll windows:5 windows x86 arch:x86

    486ce976f8d3cc3ada80177f5d315120


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/dcads-remove.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    0dd66824726715358a99b2af20e0b80a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $_5_
    .dll regsvr32 windows:5 windows x86 arch:x86

    ad090cc92ba62ac8f0b09d85e39af1a3


    Headers

    Imports

    Exports

    Sections