Overview

overview

7

Static

static

3

aa45c58cf2...18.exe

windows7-x64

3

aa45c58cf2...18.exe

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...b3.dll

windows7-x64

3

$PLUGINSDI...b3.dll

windows10-2004-x64

3

CTL3D32.dll

windows7-x64

3

CTL3D32.dll

windows10-2004-x64

3

curvres3.dll

windows7-x64

3

curvres3.dll

windows10-2004-x64

3

curxpt6.chm

windows7-x64

1

curxpt6.chm

windows10-2004-x64

1

cvxpt32.exe

windows7-x64

3

cvxpt32.exe

windows10-2004-x64

3

diagext3.dll

windows7-x64

3

diagext3.dll

windows10-2004-x64

3

hklib3.dll

windows7-x64

3

hklib3.dll

windows10-2004-x64

3

hyapi3.dll

windows7-x64

3

hyapi3.dll

windows10-2004-x64

3

instlib3.dll

windows7-x64

3

instlib3.dll

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

updown3.dll

windows7-x64

3

updown3.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa45c58cf26183c121f679014f6834fa_JaffaCakes118

  • Size

    1.1MB

  • MD5

    aa45c58cf26183c121f679014f6834fa

  • SHA1

    c269ef18313a1ad79fe219a21a87ab995baab603

  • SHA256

    195549e3747329a17e5d671a4a6fd54af87f6148a38ac80b3a1acc23f2fbbd4d

  • SHA512

    b0cdd972ebee9fc68f788ab3551336ee95c3453e5cefdf5ec96b897a10a65567f53499b620b7db123b7b1582bc60114b4ffd727f7c0fb8190d6cfe36c72dd040

  • SSDEEP

    24576:BuX2IkXXRY4jrk+htEpB+LwwnevCbEkoM3/2wnRXo9E5nyf25Ss:MPiYKRQBqXevmEKPDnlT5nyxs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • aa45c58cf26183c121f679014f6834fa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $APPDATA/CurveExpert/curves.ini
  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/instlib3.dll
    .dll windows:5 windows x86 arch:x86

    4c0ac6c954825b3516d9f6fdb1df7906


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/ownerinfo.ini
  • BEANROOT.DAT
  • BL.DAT
  • CAR.DAT
  • CTL3D32.DLL
    .dll windows:1 windows x86 arch:x86

    26a6a8bb42f08001eb263fcd2b19f438


    Headers

    Imports

    Exports

    Sections

  • CURXPT4.CNT
  • CURXPT4.HLP
  • DENSITY.DAT
  • ETA.DAT
  • HISTORY.TXT
  • HOTWIRE.DAT
  • KCOPPER.DAT
  • KVISCOUS.DAT
  • ONION.DAT
  • PRANDTL.DAT
  • REYNOLD.DAT
  • SALES.DAT
  • TANK.DAT
  • TCONDUCT.DAT
  • TEMPTIME.DAT
  • THREECOL.DAT
  • VISCOUS.DAT
  • curvres3.dll
    .dll windows:5 windows x86 arch:x86

    d0b0ab81bf0e4cd20070f6525db9fd67


    Headers

    Imports

    Exports

    Sections

  • curxpt6.chm
    .chm
  • cvxpt32.exe
    .exe windows:5 windows x86 arch:x86

    1000fc4f74ea23b10389c31f34b5c073


    Headers

    Imports

    Sections

  • diagext3.dll
    .dll windows:5 windows x86 arch:x86

    94ed244f98be7e5fab74dba8f8091e1c


    Headers

    Imports

    Exports

    Sections

  • fft.dat
  • hklib3.dll
    .dll windows:5 windows x86 arch:x86

    d1eaa0bc163d271ba037dd3999d68d7d


    Headers

    Imports

    Exports

    Sections

  • hyapi3.dll
    .dll windows:5 windows x86 arch:x86

    b7cefe2c1f10670e8529d1257ed7fa86


    Headers

    Imports

    Exports

    Sections

  • instlib3.dll
    .dll windows:5 windows x86 arch:x86

    4c0ac6c954825b3516d9f6fdb1df7906


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • updown3.dll
    .dll windows:5 windows x86 arch:x86

    d8580465c741c450eab3875f4fab8ee7


    Headers

    Imports

    Exports

    Sections