Overview

overview

7

Static

static

3

bd693e233e...18.exe

windows7-x64

7

bd693e233e...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

App/WinRAR...lt.exe

windows7-x64

3

App/WinRAR...lt.exe

windows10-2004-x64

3

App/WinRAR...64.exe

windows7-x64

1

App/WinRAR...64.exe

windows10-2004-x64

1

App/WinRAR...7z.dll

windows7-x64

1

App/WinRAR...7z.dll

windows10-2004-x64

1

App/WinRAR...xa.dll

windows7-x64

1

App/WinRAR...xa.dll

windows10-2004-x64

1

App/WinRAR...V2.dll

windows7-x64

3

App/WinRAR...V2.dll

windows10-2004-x64

3

App/WinRAR...ce.dll

windows7-x64

1

App/WinRAR...ce.dll

windows10-2004-x64

1

App/WinRAR...er.exe

windows7-x64

1

App/WinRAR...er.exe

windows10-2004-x64

3

App/WinRAR...rj.dll

windows7-x64

1

App/WinRAR...rj.dll

windows10-2004-x64

1

App/WinRAR...z2.dll

windows7-x64

1

App/WinRAR...z2.dll

windows10-2004-x64

1

App/WinRAR...ab.dll

windows7-x64

1

App/WinRAR...ab.dll

windows10-2004-x64

1

App/WinRAR...gz.dll

windows7-x64

1

App/WinRAR...gz.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bd693e233e52af91f8e30d887a630e14_JaffaCakes118

  • Size

    2.0MB

  • MD5

    bd693e233e52af91f8e30d887a630e14

  • SHA1

    39508fb51614b2b7f1f518863e01039e9b39923d

  • SHA256

    9d3f59683fec728d77ea2806bb134c0f3c6766dc2f34d684fcb4809d4e8fa629

  • SHA512

    ad3881b703125380940858b66275a24b4b7a227099ff546a34850f32696af76a0984b5aedaa8c6fad779b651dc2376fe4b438ff5579f127627b53efac0973f6e

  • SSDEEP

    49152:tn45XcpcQO4sk+9IMNSGLehZzSAfPbAliNzoHhne:tIM2k8fJLehhbAkQhne

Score
3/10

Malware Config

Signatures

  • Unsigned PE 52 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • bd693e233e52af91f8e30d887a630e14_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    8773e19ae02f331332db1b00671fdecf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • App/WinRAR-x64/Default.SFX
    .exe windows:5 windows x86 arch:x86

    93ff054b805e17efd7f7ae1730680391


    Headers

    Imports

    Sections

  • App/WinRAR-x64/Default64.SFX
    .exe windows:5 windows x64 arch:x64

    94d515ee8c46f2ab73506665e8beee5a


    Headers

    Imports

    Sections

  • App/WinRAR-x64/Descript.ion
  • App/WinRAR-x64/File_Id.diz
  • App/WinRAR-x64/Formats/7z.fmt
    .dll windows:5 windows x64 arch:x64

    2e80634c95d9d845f6012eb28e7d0cc3


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/7zxa.dll
    .dll windows:4 windows x64 arch:x64

    d13f5a2ef917f3051e8fad2a9edab196


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/UNACEV2.DLL
    .dll windows:1 windows x86 arch:x86

    8390514c40641509cd0941c1fb7588ab


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/ace.fmt
    .dll windows:5 windows x64 arch:x64

    3dd7080fdae39e89326098df6ce06c2a


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/ace32loader.exe
    .exe windows:5 windows x86 arch:x86

    8d6c680dc6e79bf7cb92b3f32d9d19f7


    Headers

    Imports

    Sections

  • App/WinRAR-x64/Formats/arj.fmt
    .dll windows:5 windows x64 arch:x64

    4767de227e3159cab860e1f677aaac15


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/bz2.fmt
    .dll windows:5 windows x64 arch:x64

    9105736b08efc9f72881ae51c5591f2f


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/cab.fmt
    .dll windows:5 windows x64 arch:x64

    5a746023ecfac28104f5c941bed4d40d


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/gz.fmt
    .dll windows:5 windows x64 arch:x64

    375f15741fff5d7d8e296b846ef1f1dd


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/iso.fmt
    .dll windows:5 windows x64 arch:x64

    4a08fc97c7eb192b3288e92d39a3c9b9


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/lzh.fmt
    .dll windows:5 windows x64 arch:x64

    8132f36c6235c3b09b77874cbc025972


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/tar.fmt
    .dll windows:5 windows x64 arch:x64

    10cffe81406ba1adbe9cd4edf09a423f


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/uue.fmt
    .dll windows:5 windows x64 arch:x64

    086007e3c8de93226bc5d5435305297a


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/Formats/z.fmt
    .dll windows:5 windows x64 arch:x64

    a551c60d2f21b3f9bdc7ec5cee2cf4fb


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR-x64/License.txt
  • App/WinRAR-x64/Rar.exe
    .exe windows:5 windows x64 arch:x64

    6418d4051bbcfdf5199e8bfc4bfde292


    Headers

    Imports

    Sections

  • App/WinRAR-x64/Rar.txt
  • App/WinRAR-x64/RarFiles.lst
  • App/WinRAR-x64/ReadMe.txt
  • App/WinRAR-x64/TechNote.txt
    .vbs
  • App/WinRAR-x64/UnRAR.exe
    .exe windows:5 windows x64 arch:x64

    5378db51194850435d2ba2fbb8b530a4


    Headers

    Imports

    Sections

  • App/WinRAR-x64/UnrarSrc.txt
  • App/WinRAR-x64/WhatsNew.txt
  • App/WinRAR-x64/WinCon.SFX
    .exe windows:5 windows x86 arch:x86

    d664338ea009589942dd6aacfe0873b1


    Headers

    Imports

    Sections

  • App/WinRAR-x64/WinCon64.SFX
    .exe windows:5 windows x64 arch:x64

    d664338ea009589942dd6aacfe0873b1


    Headers

    Imports

    Sections

  • App/WinRAR-x64/WinRAR.chm
    .chm
  • App/WinRAR-x64/WinRAR.exe
    .exe windows:5 windows x64 arch:x64

    b270a3855a4edc5514963773315000b4


    Headers

    Imports

    Sections

  • App/WinRAR-x64/Zip.SFX
    .exe windows:5 windows x86 arch:x86

    ececc473fe0400492818c3054a72770e


    Headers

    Imports

    Sections

  • App/WinRAR-x64/Zip64.SFX
    .exe windows:5 windows x64 arch:x64

    dfe98f9b8e5a8d134cc697c1c0f3be22


    Headers

    Imports

    Sections

  • App/WinRAR/Default.SFX
    .exe windows:5 windows x86 arch:x86

    93ff054b805e17efd7f7ae1730680391


    Headers

    Imports

    Sections

  • App/WinRAR/Descript.ion
  • App/WinRAR/File_Id.diz
  • App/WinRAR/Formats/7z.fmt
    .dll windows:5 windows x86 arch:x86

    810ff85253ea0da9e4270285b177dcc2


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/7zxa.dll
    .dll windows:4 windows x86 arch:x86

    961ffb8f71d3099e6afd08b41dae82e3


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/UNACEV2.DLL
    .dll windows:1 windows x86 arch:x86

    8390514c40641509cd0941c1fb7588ab


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/ace.fmt
    .dll windows:5 windows x86 arch:x86

    03ee27585fbe4280f8bce8f0a2a3c262


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/arj.fmt
    .dll windows:5 windows x86 arch:x86

    1e364ee23def5d605ef85e53a4bded2d


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/bz2.fmt
    .dll windows:5 windows x86 arch:x86

    a571b72321514a15e5ef913d5ddebafb


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/cab.fmt
    .dll windows:5 windows x86 arch:x86

    18a24461d3867eae573f22f70e5bc4cd


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/gz.fmt
    .dll windows:5 windows x86 arch:x86

    a5558bec30dbda6969f609ece32f46dc


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/iso.fmt
    .dll windows:5 windows x86 arch:x86

    abfb7f92f2f56435c1982b30abece301


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/lzh.fmt
    .dll windows:5 windows x86 arch:x86

    d1fafdeb635fd965ec8877edeb363ff6


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/tar.fmt
    .dll windows:5 windows x86 arch:x86

    5cba4bbbe1a10a51c0adbfce2eea3e54


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/uue.fmt
    .dll windows:5 windows x86 arch:x86

    92d227f3b96bb1ef31d08aaeb66b079a


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/Formats/z.fmt
    .dll windows:5 windows x86 arch:x86

    690706108c4d5618e6012f84061ddfa3


    Headers

    Imports

    Exports

    Sections

  • App/WinRAR/License.txt
  • App/WinRAR/Rar.exe
    .exe windows:5 windows x86 arch:x86

    434e8913d710f61d1d0d6dfce78e8d29


    Headers

    Imports

    Sections

  • App/WinRAR/Rar.txt
  • App/WinRAR/RarFiles.lst
  • App/WinRAR/ReadMe.txt
  • App/WinRAR/TechNote.txt
    .vbs
  • App/WinRAR/UnRAR.exe
    .exe windows:5 windows x86 arch:x86

    1da1fb3d1356bfe063e7074a84c82ba0


    Headers

    Imports

    Sections

  • App/WinRAR/UnrarSrc.txt
  • App/WinRAR/WhatsNew.txt
  • App/WinRAR/WinCon.SFX
    .exe windows:5 windows x86 arch:x86

    d664338ea009589942dd6aacfe0873b1


    Headers

    Imports

    Sections

  • App/WinRAR/WinRAR.chm
    .chm
  • App/WinRAR/WinRAR.exe
    .exe windows:5 windows x86 arch:x86

    f228f0db3de9943ad6af41c6fcfa7010


    Headers

    Imports

    Sections

  • App/WinRAR/Zip.SFX
    .exe windows:5 windows x86 arch:x86

    ececc473fe0400492818c3054a72770e


    Headers

    Imports

    Sections

  • WinRARPortable.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $EXEDIR/App/WinRAR-x64/rarreg
  • $EXEDIR/App/WinRAR/rarreg
  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    eee37c14e102da3f62385f9796c701ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp