Overview

overview

7

Static

static

3

8d492323fb...18.exe

windows7-x64

3

8d492323fb...18.exe

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

components/FFHst.dll

windows7-x64

3

components/FFHst.dll

windows10-2004-x64

3

components...ll.exe

windows7-x64

7

components...ll.exe

windows10-2004-x64

7

escorTlbr.dll

windows7-x64

3

escorTlbr.dll

windows10-2004-x64

3

escort.dll

windows7-x64

6

escort.dll

windows10-2004-x64

6

escortApp.dll

windows7-x64

3

escortApp.dll

windows10-2004-x64

3

escortEng.dll

windows7-x64

3

escortEng.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d492323fbc513ce4dcf2a120ae9e8d5_JaffaCakes118

  • Size

    657KB

  • MD5

    8d492323fbc513ce4dcf2a120ae9e8d5

  • SHA1

    2510f2008fba4b2d241a5f7fbbea7eb75a580756

  • SHA256

    d8a8766cc328ba90bed6a3e9565c30581ff5b15944fe21680d283a5bef86f8e0

  • SHA512

    614de8c011170a3df00b9c2562e0a5c6a630f0d2a9f150844e05f2bb7e74fca04588e252ebc52f48aa7fe27ea09b29b9101ae805d500f586219ea4d111b312b5

  • SSDEEP

    12288:OlMZ7s6ysHYJvCYQ+hh1dpYAgz8vgcLvVzc0/Et:OlMZ7dyeYL17gz29vVzcgEt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs
    installer

Files

  • 8d492323fbc513ce4dcf2a120ae9e8d5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    c193ea402999ea8ce8faa9fef22de03d


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • chrome.manifest
  • components/FFHst.dll
    .dll windows:4 windows x86 arch:x86

    ebb85736a631e601557e361c9a07cfa3


    Headers

    Imports

    Exports

    Sections

  • components/FFHst.xpt
  • components/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • escorTlbr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0605cf8ffcde4c1c6deeccf96fa42266


    Headers

    Imports

    Exports

    Sections

  • escort.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4a7a110d832edf9867d8c44b6b0971db


    Headers

    Imports

    Exports

    Sections

  • escortApp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fc36586142ac5059e693ceeac0337778


    Headers

    Imports

    Exports

    Sections

  • escortEng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5f0716facde1e29567d90efd8470f257


    Headers

    Imports

    Exports

    Sections

  • install.rdf
    .xml