Overview

overview

7

Static

static

3

a02946b8ee...18.exe

windows7-x64

7

a02946b8ee...18.exe

windows10-2004-x64

7

$R2/Thunder.dll

windows7-x64

3

$R2/Thunder.dll

windows10-2004-x64

3

$R2/UserDa...ox.dll

windows7-x64

3

$R2/UserDa...ox.dll

windows10-2004-x64

3

$R2/XLUser.dll

windows7-x64

3

$R2/XLUser.dll

windows10-2004-x64

3

$R3/Thunder.dll

windows7-x64

3

$R3/Thunder.dll

windows10-2004-x64

3

$R3/XLUser.dll

windows7-x64

3

$R3/XLUser.dll

windows10-2004-x64

3

$SYSDIR/dr...ts.dll

windows7-x64

3

$SYSDIR/dr...ts.dll

windows10-2004-x64

3

$SYSDIR/dr...ts.dll

windows7-x64

3

$SYSDIR/dr...ts.dll

windows10-2004-x64

3

C:/Users/P...ox.dll

windows7-x64

1

C:/Users/P...ox.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a02946b8eeb32e6cc502f8a227f02928_JaffaCakes118

  • Size

    1.2MB

  • MD5

    a02946b8eeb32e6cc502f8a227f02928

  • SHA1

    25549a6783b33045273b74d0ec311dccad99c8ae

  • SHA256

    9488612bad3b065bc46eae538433918d8021192fddbb59393c7cbb53826a5e6c

  • SHA512

    16a703d6cc9d6c27cf0bd4a562c5680824c1a334a149805a46d50268aad5566cf077aeef48001dd07ddc5f6b0059d6b20aa658eb96d04076276029cb020117d3

  • SSDEEP

    24576:h0jhFpKs5nwxx/qh0jWwd8czRQ/0MSiroK7Nnd8GJL1m93ES/vtKTRwJP:ShbKSGhK28URQ/GiUK7Ae8Vt/vtK1wJP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • a02946b8eeb32e6cc502f8a227f02928_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    17ae050e88c8032ac67ecaa16e8b6361


    Headers

    Imports

    Sections

  • $R2/Thunder.exe
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $R2/UserData/Profiles/Program/toolbox.bak
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $R2/XLUser.dll
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $R3/Thunder.bak
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $R3/XLUser.bak
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/drivers/etc/hosts
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/drivers/etc/hosts.bak
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections

  • C:/Users/Public/Thunder Network/Thunder$1/Profiles/Program/toolbox.bak
    .dll windows:4 windows x86 arch:x86

    dec6b15c0428dbfe68002d314aeabddf


    Headers

    Imports

    Exports

    Sections