Overview

overview

6

Static

static

3

a45619d886...18.exe

windows7-x64

3

a45619d886...18.exe

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R1.dll

windows7-x64

6

$R1.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    a45619d886838071ded4f1ee74563f0a_JaffaCakes118

  • Size

    614KB

  • MD5

    a45619d886838071ded4f1ee74563f0a

  • SHA1

    2cc57e0e5658e74e0d6d1ff700b775ad49ec7c13

  • SHA256

    59a2b242af7a061d2913c8db5172336c8cd8fa508d9659947e403bff254d115b

  • SHA512

    fd81df388bce55ac51a941c6ca30017c95761e4220bac040f287d30c34968fefbc8eece33275f42940ff263b50575c5c76dfc007980ab1e5cd69edc8502f24ea

  • SSDEEP

    12288:zgNnmhFk/2BrEMOpdm+pSDxK0jH1HLrQ/c2GSbuXIzxx5Pnr:mm/REdm+AFfjHJLO5qXIzRT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • a45619d886838071ded4f1ee74563f0a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $R1
    .dll regsvr32 windows:5 windows x86 arch:x86

    63c3f54689cf57cbe972d07573c68c83


    Headers

    Imports

    Exports

    Sections