Overview

overview

7

Static

static

5

a0f689806e...18.exe

windows7-x64

7

a0f689806e...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$TEMP/iexplore.exe

windows7-x64

7

$TEMP/iexplore.exe

windows10-2004-x64

7

$TEMP/inst.exe

windows7-x64

7

$TEMP/inst.exe

windows10-2004-x64

7

LinkLines.exe

windows7-x64

3

LinkLines.exe

windows10-2004-x64

3

LinkLines.exe

windows7-x64

3

LinkLines.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0f689806e037091b113b71855ecd759_JaffaCakes118

  • Size

    2.1MB

  • MD5

    a0f689806e037091b113b71855ecd759

  • SHA1

    6ac5d652f807b708ee9961d57615930036287a4e

  • SHA256

    d7786b661cab3987f8cf464e5380e6531218d41338d4970a149ffe07152cbba0

  • SHA512

    5c330904e1b945f6131293d5d320933520ccdecc0ff274a257794f7d967f1f4dbf3bd3c0fa12e7c78da1c604a0063479b88a831dfa5997688174d9f67ea04001

  • SSDEEP

    49152:Xq9bKVpJyv4K9XAVjFQq5JwwOSaSjms8SAlqM3FSd2cWxxv1P1:Xq9QpYBOwqP9FaEgpQdqX/

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • a0f689806e037091b113b71855ecd759_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9b89b73a2bd2f3c9338530bbd4a212f0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/iexplore.exe
    .exe windows:5 windows x86 arch:x86

    5a0101721097a0565fcce941ae90d50e


    Headers

    Imports

    Sections

  • $TEMP/inst.exe
    .exe windows:5 windows x86 arch:x86

    5a0101721097a0565fcce941ae90d50e


    Headers

    Imports

    Sections

  • LinkLines.exe
    .exe windows:4 windows x86 arch:x86

    fcd738b3e2889f53e81341f9d90c66a4


    Headers

    Imports

    Sections

  • LinkLines.exe.BAK
    .exe windows:4 windows x86 arch:x86

    fcd738b3e2889f53e81341f9d90c66a4


    Headers

    Imports

    Sections

  • data/desktop.dxp
  • data/font.dxp
  • data/graphics.dxp
  • data/logo.dxp
  • data/sounds.dar
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9b89b73a2bd2f3c9338530bbd4a212f0


    Headers

    Imports

    Sections