Overview

overview

3

Static

static

3

b1bf578637...18.exe

windows7-x64

3

b1bf578637...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...de.dll

windows7-x64

3

$PLUGINSDI...de.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1bf578637d44bdd65648bbc1b32676c_JaffaCakes118

  • Size

    163KB

  • MD5

    b1bf578637d44bdd65648bbc1b32676c

  • SHA1

    d4c975db34f325a5d96a9f4d23aba4efe2feba39

  • SHA256

    8bf96bc364226c6c779628cd2c7ae2832abf1ea1d4031503795c72620dcc8cf4

  • SHA512

    2eea3bdaf86dad05d4348cf7d32128a4c32e6be80e39c857e2e897b839bdfd43b17729ba095f619cf6bb843586eba8d68360200c52232a75bca5f2e9c4d3c110

  • SSDEEP

    3072:zFcRhSdNJB+3ACIr4R9N9Sd6nrCkQKcBosZ4ERRGlsKnwjjvvYBnF6aVh:GQh54XbS6nrCrBoAlRRYscujAnMaX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • b1bf578637d44bdd65648bbc1b32676c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    fa87d05da8cd992552ea846b6a9a1bb2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSIS_Picasa_Unicode.dll
    .dll windows:4 windows x86 arch:x86

    40312f20925ff5466a26e0ed0575be77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp