Overview

overview

8

Static

static

3

85234c456e...18.exe

windows7-x64

7

85234c456e...18.exe

windows10-2004-x64

7

$PLUGINSDI...SH.dll

windows7-x64

3

$PLUGINSDI...SH.dll

windows10-2004-x64

3

$PLUGINSDI...NS.dll

windows7-x64

3

$PLUGINSDI...NS.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...NU.dll

windows7-x64

3

$PLUGINSDI...NU.dll

windows10-2004-x64

3

$TEMP/Fox-...ER.exe

windows7-x64

8

$TEMP/Fox-...ER.exe

windows10-2004-x64

8

$WINDIR/SSS-CS05.exe

windows7-x64

3

$WINDIR/SSS-CS05.exe

windows10-2004-x64

3

$WINDIR/Sm...wn.chm

windows7-x64

1

$WINDIR/Sm...wn.chm

windows10-2004-x64

1

ж�...��.exe

windows7-x64

3

ж�...��.exe

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

�...��.url

windows7-x64

1

�...��.url

windows10-2004-x64

1

�...��.url

windows7-x64

1

�...��.url

windows10-2004-x64

1

�...��.url

windows7-x64

1

�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    85234c456e7aad7535847dcbd9b92962_JaffaCakes118

  • Size

    1.0MB

  • MD5

    85234c456e7aad7535847dcbd9b92962

  • SHA1

    05b493a6b01247a33f0ed8f684753663cd9b4a7b

  • SHA256

    542980efdfb47b56e2e5dab3b0c8afd2f6b9062ddddf8d113027838a132afbe7

  • SHA512

    08552fd60b5fa56bebaed418a47463a32e11f7f3868c80516cf7009abdd3c4ec5f4b28eb36889a86e46b9fe4abd868a2b2630b39d6aba03edc4020db816025f7

  • SSDEEP

    24576:VU19dMVNPGs6Xzvj3iLpyGH870SXMaorIqccwfTMWh0iQP:GFANPGv3CpyGH870SToELJrMWx6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 85234c456e7aad7535847dcbd9b92962_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ADVSPLASH.DLL
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/INSTALLOPTIONS.DLL
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KILLPROCDLL.DLL
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/STARTMENU.DLL
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_Splash.BMP
  • $PLUGINSDIR/Splash_Splash.WAV
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/Fox-Temp/IEHELPER.EXE
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • $WINDIR/SSS-CS05.EXE
    .exe windows:4 windows x86 arch:x86

    a922a4330865ecb792b8c8fc51355bbf


    Headers

    Imports

    Sections

  • $WINDIR/Smart Shutdown.CHM
    .chm
  • ScreenShot1.JPG
    .jpg
  • ж.EXE
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KILLPROCDLL.DLL
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • ĺүƷRSS.URL
  • ں.TXT
  • .TXT
  • ⷴ.URL
  • үƷб.URL