Overview

overview

8

Static

static

3

b13cdf8680...18.exe

windows7-x64

7

b13cdf8680...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ew.exe

windows7-x64

6

$PLUGINSDI...ew.exe

windows10-2004-x64

6

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Unlocker.exe

windows7-x64

8

Unlocker.exe

windows10-2004-x64

8

UnlockerAssistant.exe

windows7-x64

3

UnlockerAssistant.exe

windows10-2004-x64

3

UnlockerCOM.dll

windows7-x64

3

UnlockerCOM.dll

windows10-2004-x64

3

UnlockerDriver5.sys

windows7-x64

1

UnlockerDriver5.sys

windows10-2004-x64

1

UnlockerHook.dll

windows7-x64

3

UnlockerHook.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b13cdf868010701e8b6f778a84b4e5bf_JaffaCakes118

  • Size

    222KB

  • MD5

    b13cdf868010701e8b6f778a84b4e5bf

  • SHA1

    9cdd586cf9352eb8de7588d93563ca391eb6affa

  • SHA256

    f8436ba13b439ddc850588de27b2008064760504a86c151b74eddcd9453cb0a3

  • SHA512

    c791d68c56d6a7625ba05822e62b516f2dc88f4dd07581801f7b0bb62ace5b2f8c43a1c35b74379e78a70e5f7e4dd1449c4259d39db46b0d99d9a3ac602db2bd

  • SSDEEP

    3072:ZaF6FISxuJ8J1RyKlU0qmUy5nuf8C1TSkIJAuTyRklqfNDeBIzEIKIQtoxjU7Eo:yOMaxeXM5uH1zfu4AIKIQsFTVSpo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 5 IoCs
    installer

Files

  • b13cdf868010701e8b6f778a84b4e5bf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    ee01c5cc33cdb3294484fc93e41c14ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a75ed4b57a83b633f5cb5d4939d72f27


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/eBay_shortcuts_1016_new.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • eBay.ico
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • README.TXT
  • Unlocker.exe
    .exe windows:4 windows x86 arch:x86

    180da66498d17cf39dc4660da43dee0c


    Headers

    Imports

    Sections

  • UnlockerAssistant.exe
    .exe windows:4 windows x86 arch:x86

    a510baa3ecd268c6c6bb7d395fef0aad


    Headers

    Imports

    Sections

  • UnlockerCOM.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cab4339f8b761ab31e628f0fd642a7a8


    Headers

    Imports

    Exports

    Sections

  • UnlockerDriver5.sys
    .sys windows:4 windows x86 arch:x86

    2a015bf36d12492d1085356809814d9d


    Headers

    Imports

    Sections

  • UnlockerHook.dll
    .dll windows:4 windows x86 arch:x86

    f4d093db5e466a48d555b9ceadb39dab


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis