Overview

overview

7

Static

static

3

9fe24fc0d6...18.exe

windows7-x64

3

9fe24fc0d6...18.exe

windows10-2004-x64

3

$PLUGINSDI...rk.dll

windows7-x64

3

$PLUGINSDI...rk.dll

windows10-2004-x64

3

TrojanKiller.exe

windows7-x64

3

TrojanKiller.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...rk.dll

windows7-x64

3

$PLUGINSDI...rk.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    9fe24fc0d660d0d7fdcbf3725a4a22e7_JaffaCakes118

  • Size

    3.7MB

  • MD5

    9fe24fc0d660d0d7fdcbf3725a4a22e7

  • SHA1

    f2f50ce874b7c8b86d2553adfe6de3d5afc6efe5

  • SHA256

    8dcb01633f3b215ebce90f5eaea65221a7853265b00fbb6fa0ce0fcacbea1948

  • SHA512

    1b5f478dae01c189295ada30f5edc23e0b3562b4ab5f3b4d3118eeb7c95edbc334e42ece63abf9b3638ce32a9e006a4b5642f93288e0a53bbcf07144f66de4d7

  • SSDEEP

    49152:5lu1Gylf4xWWqr7i4T6n5XqN6IJPIFulr58pt9tTzKghLpvzgdXuA64uglHpbEk1:5M1PmJXn56Awl55mRhLZgNn6hgC3OcA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 9fe24fc0d660d0d7fdcbf3725a4a22e7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TrojanKiller.exe
    .exe windows:4 windows x86 arch:x86

    f11b006a48c471b1410838ee1dde3451


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • dbase.tk1
  • dbase.tk2
  • dbase.tk3
  • dbase.tk4
  • dbase.tk5