Overview

overview

7

Static

static

7

84d7b074c6...18.exe

windows7-x64

3

84d7b074c6...18.exe

windows10-2004-x64

3

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

ASYCFILT.dll

windows7-x64

3

ASYCFILT.dll

windows10-2004-x64

3

CMDLGCHS.dll

windows7-x64

1

CMDLGCHS.dll

windows10-2004-x64

1

COMCAT.dll

windows7-x64

3

COMCAT.dll

windows10-2004-x64

3

DreamP.exe

windows7-x64

7

DreamP.exe

windows10-2004-x64

7

MSIMG32.dll

windows7-x64

3

MSIMG32.dll

windows10-2004-x64

3

OLEAUT32.dll

windows7-x64

3

OLEAUT32.dll

windows10-2004-x64

3

OLEPRO32.dll

windows7-x64

3

OLEPRO32.dll

windows10-2004-x64

3

STDOLE2.dll

windows7-x64

1

STDOLE2.dll

windows10-2004-x64

1

VB6CHS.dll

windows7-x64

1

VB6CHS.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    84d7b074c688ee2cd6b240b553ebc776_JaffaCakes118

  • Size

    1.5MB

  • MD5

    84d7b074c688ee2cd6b240b553ebc776

  • SHA1

    8135c82f95af8d8ccb08d506d2a40ba9f7f664e4

  • SHA256

    16290a051310f9e9daed69355cf539c3ae1cc49af557f6fba6d6cab0f61210c0

  • SHA512

    ef294eaf377512184dc6cf698d0bbb5d8f6326472cc3e4d8fbba22b560ce212ee61673765e516696a53fdeaa198b4b4fdd002c3f77883c3930d9f392ddc833e3

  • SSDEEP

    24576:T3+XPECRClJLIu6O6nSszn9Bbc54C8BlOVy+mBlaTanc4aAdFDM6Qayw4P2wI:qzClbWSgk4CucmBcVAcrW

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 84d7b074c688ee2cd6b240b553ebc776_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    1ba6926a1ee4e4cda118768081f528d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • DreamP.exe
    .exe windows:4 windows x86 arch:x86

    5a498eee87e4d89512a84502f500181f


    Headers

    Imports

    Sections

  • MSIMG32.DLL
    .dll windows:5 windows x86 arch:x86

    cadcb7e945392853f233c18a3132d24b


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • VideoSet.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bkg/01/001.JPG
  • bkg/01/002.JPG
  • bkg/01/003.JPG
  • bkg/01/004.JPG
  • bkg/01/005.JPG
  • bkg/01/006.JPG
  • bkg/01/007.JPG
  • bkg/01/008.JPG
  • bkg/01/009.JPG
  • bkg/01/010.JPG
  • bkg/01/011.JPG
  • bkg/01/012.JPG
  • bkg/01/013.JPG
  • bkg/01/014.JPG
  • bkg/01/015.JPG
  • bkg/01/016.JPG
  • bkg/01/017.JPG
  • bkg/01/018.JPG
  • bkg/01/019.JPG
  • bkg/01/020.JPG
  • bkg/01/021.JPG
  • bkg/01/022.JPG
  • bkg/01/023.JPG
  • bkg/01/024.JPG
  • bkg/01/025.JPG
  • bkg/01/026.JPG
  • dttMB.dat
  • msado26.tlb
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • skin.jpg
    .jpg
  • wshom.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    ee88d179d715a60aeee5dcd390cafc03


    Headers

    Imports

    Exports

    Sections