Overview

overview

7

Static

static

3

personal-i...up.exe

windows7-x64

7

personal-i...up.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

Links/Down...on.url

windows7-x64

1

Links/Down...on.url

windows10-2004-x64

1

Links/Mail...rt.url

windows7-x64

1

Links/Mail...rt.url

windows10-2004-x64

1

Links/Prog...ge.url

windows7-x64

1

Links/Prog...ge.url

windows10-2004-x64

1

Links/Regi...on.url

windows7-x64

6

Links/Regi...on.url

windows10-2004-x64

3

RegDll.bat

windows7-x64

6

RegDll.bat

windows10-2004-x64

6

UnRegDll.bat

windows7-x64

3

UnRegDll.bat

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

rView.exe

windows7-x64

3

rView.exe

windows10-2004-x64

3

svcmon.dll

windows7-x64

3

svcmon.dll

windows10-2004-x64

3

svcmon.exe

windows7-x64

5

svcmon.exe

windows10-2004-x64

5

svcmonh.dll

windows7-x64

3

svcmonh.dll

windows10-2004-x64

3

svcmoni.dll

windows7-x64

6

svcmoni.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    af0fa42b0900d97c5f54987b3a4f3705_JaffaCakes118

  • Size

    683KB

  • MD5

    af0fa42b0900d97c5f54987b3a4f3705

  • SHA1

    72acbf7651780a0a9e441ab19f452f1f1a301f9d

  • SHA256

    faed2756851306da12ab319c5d2e3e1322788fa94be9f20f2932b2eab521fc7d

  • SHA512

    70172b17aa8ae2a0097b379d4126123a88482e0d9fedb176301dc331dcbb1c0fa6d9284765ecc21525a4ab54874d63eab5149e336f9501dd6cba7fa50f9d5024

  • SSDEEP

    12288:XuRydzuES8HGMHBsumEFEoYAM25sbOEbAzVgkfqUM37a2iH6pPZK2Xk:+RydLHBs1EFEoy25sSEgWkfqTu23Pg2U

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • af0fa42b0900d97c5f54987b3a4f3705_JaffaCakes118
    .rar
  • file_id.diz
  • personal-inspector-setup.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Icons/TrayIcon00.ico
  • Icons/TrayIcon02.ico
  • Icons/TrayIcon03.ico
  • Icons/TrayIcon04.ico
  • Icons/TrayIcon06.ico
  • Icons/TrayIcon07.ico
  • Icons/TrayIcon09.ico
  • Icons/TrayIcon10.ico
  • Icons/TrayIcon11.ico
  • Icons/TrayIcon12.ico
  • Icons/TrayIcon13.ico
  • Icons/TrayIcon15.ico
  • Links/Download lastest version.url
  • Links/Mail to support.url
  • Links/Program's home page.url
  • Links/Registration.url
  • RegDll.bat
  • UnRegDll.bat
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • license.txt
  • rView.exe
    .exe windows:4 windows x86 arch:x86

    d610517a04dbca03784c09b1a1d3a877


    Headers

    Imports

    Exports

    Sections

  • svcmon.dll
    .dll windows:4 windows x86 arch:x86

    ebc179252a43cf7b56835e17a54f0a82


    Headers

    Imports

    Exports

    Sections

  • svcmon.exe
    .exe windows:4 windows x86 arch:x86

    4ab3d7ca3952d8613870894c53831055


    Headers

    Imports

    Exports

    Sections

  • svcmonh.dll
    .dll windows:4 windows x86 arch:x86

    4e08dcdbd90e095ed36fee0f5f05f2a2


    Headers

    Imports

    Exports

    Sections

  • svcmoni.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    df7d47b9c25ed180b75c963ada10e07f


    Headers

    Imports

    Exports

    Sections

  • 下载说明.htm
    .html .js polyglot