Overview

overview

3

Static

static

3

b1395b7c50...18.exe

windows7-x64

3

b1395b7c50...18.exe

windows10-2004-x64

3

$0/questbasic.dll

windows7-x64

1

$0/questbasic.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1395b7c502e72ac09f8d119f19545a8_JaffaCakes118

  • Size

    637KB

  • MD5

    b1395b7c502e72ac09f8d119f19545a8

  • SHA1

    f9e0b86cbb352cbe93b062040c530a44f2dd5e23

  • SHA256

    457d7b632d796799479c04b15587a14d65c2c2ba1904328a704bf86df5cf6e60

  • SHA512

    68f15acfe31bae3607a1fbfbb49f04691e3f5a7f2ec7d2c09cb2cdcca5c8a23dfdf4cd65a7ec3958f0a7d87d4f9491940f99736f4cba567597275e788ecd2c05

  • SSDEEP

    12288:p+kgOR8h9jjY3hPo8FILX0nn6IwHkuSWS6ISRIY3IT+ilIImo4Lxl70dy:pydjj83hAHLkn6IeSWFPOTn2Iy70g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • b1395b7c502e72ac09f8d119f19545a8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbasic.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp