Overview

overview

3

Static

static

3

a9a3a446fb...18.exe

windows7-x64

3

a9a3a446fb...18.exe

windows10-2004-x64

3

$0/questbasic.dll

windows7-x64

1

$0/questbasic.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9a3a446fb26dda91a4f0796683c2016_JaffaCakes118

  • Size

    600KB

  • MD5

    a9a3a446fb26dda91a4f0796683c2016

  • SHA1

    41f53789f6017a357432e8dc5a63125bda32a2fd

  • SHA256

    05c2a3dc93dc59d845bb30b0a13ed8f91bd05eb270d50321a5bd70d5480fcd49

  • SHA512

    00e73d673653886b2c87ccd99927f08604568cfb6e3c081a86a2e07b40e0266811de00828bb3163f0561e9ba002853d4b92049f537d3272c3f39f4569049291a

  • SSDEEP

    12288:pddtP2tGFIrncM80oxa7LGYPsMTCEoRqATIK7UNRRX7:pdn167cBba+cduEoRqATIKGRRr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • a9a3a446fb26dda91a4f0796683c2016_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbasic.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp