Overview

overview

8

Static

static

3

a9609c0a8d...18.exe

windows7-x64

7

a9609c0a8d...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ew.exe

windows7-x64

6

$PLUGINSDI...ew.exe

windows10-2004-x64

6

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Unlocker.exe

windows7-x64

8

Unlocker.exe

windows10-2004-x64

8

UnlockerAssistant.exe

windows7-x64

3

UnlockerAssistant.exe

windows10-2004-x64

3

UnlockerCOM.dll

windows7-x64

3

UnlockerCOM.dll

windows10-2004-x64

3

UnlockerDriver5.sys

windows7-x64

1

UnlockerDriver5.sys

windows10-2004-x64

1

UnlockerHook.dll

windows7-x64

3

UnlockerHook.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9609c0a8d15bac20bd46d6500679f9a_JaffaCakes118

  • Size

    215KB

  • MD5

    a9609c0a8d15bac20bd46d6500679f9a

  • SHA1

    17a789708147a14df46b4be052e8e8632992552a

  • SHA256

    f5739dbba597af0aa7d3dcc521d8059c1ad4b1d8d5d8e60ee3204ff8feb781ed

  • SHA512

    c67af5c4650338f0c0ea6778ce388bbf516768be9b54d6ee7dc5f6fccb1fbacfec2ab2733d6dc4620c403a27ec39aa637ce019d0752ff4ce8a9da860d2b039ea

  • SSDEEP

    3072:MaF6FISxuJ8J1RyKlU0qmUy5nuf8C1TSkIJAuTyRklqfNDeBIzEIKIQtoxjU7Eok:1OMaxeXM5uH1zfu4AIKIQsFTVSp+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs
    installer

Files

  • a9609c0a8d15bac20bd46d6500679f9a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    ee01c5cc33cdb3294484fc93e41c14ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a75ed4b57a83b633f5cb5d4939d72f27


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/eBay_shortcuts_1016_new.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • eBay.ico
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • README.TXT
  • Unlocker.exe
    .exe windows:4 windows x86 arch:x86

    180da66498d17cf39dc4660da43dee0c


    Headers

    Imports

    Sections

  • UnlockerAssistant.exe
    .exe windows:4 windows x86 arch:x86

    a510baa3ecd268c6c6bb7d395fef0aad


    Headers

    Imports

    Sections

  • UnlockerCOM.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cab4339f8b761ab31e628f0fd642a7a8


    Headers

    Imports

    Exports

    Sections

  • UnlockerDriver5.sys
    .sys windows:4 windows x86 arch:x86

    2a015bf36d12492d1085356809814d9d


    Headers

    Imports

    Sections

  • UnlockerHook.dll
    .dll windows:4 windows x86 arch:x86

    f4d093db5e466a48d555b9ceadb39dab


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a75ed4b57a83b633f5cb5d4939d72f27


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp