Overview

overview

7

Static

static

7

bba3112975...18.exe

windows7-x64

7

bba3112975...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

WinKawaks.exe

windows7-x64

7

WinKawaks.exe

windows10-2004-x64

7

WinKawakss.exe

windows7-x64

3

WinKawakss.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bba3112975b222f26738686de00a27dd_JaffaCakes118

  • Size

    2.5MB

  • MD5

    bba3112975b222f26738686de00a27dd

  • SHA1

    56acf66cdadcaf952ed0a69a7c1432c623e46b6e

  • SHA256

    965c7f274b5d0efe64d4300d92cb34b97c24cc35089e53d81de8e5a4b17d540c

  • SHA512

    c155232d4080d5e0b0f17b91edd5f19fdba14680de4fb7b881e4c4d7827014cb24ebac55f63e5802e73003c2dac9dc6073c0e5d3204dcb8b97a4a23a06bb4392

  • SSDEEP

    49152:yLFGzCcot3LT6HyBIeNQcVEwhxJOoWreEz5GP6SKqsT4XDQu5ECRXzL9zzvw/7:yLFeot3HIeNQcFKWkGP8NT4XDX5zz5HS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • bba3112975b222f26738686de00a27dd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ADD.DAT
  • Main_dtdj.ini
  • WinKawaks.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WinKawaks.ini
  • WinKawaks.rom
  • WinKawakss.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • defaultkeysCPS.ini
  • defaultkeysMVS.ini
  • lang/Chinese(Big5).lng
  • lang/Chinese(Simp).lng
  • lang/English.lng
  • nemo.zip
    .zip
  • nm_09.rom
  • nm_18.rom
  • nm_19.rom
  • nm_32.rom
  • nm_gfx1.rom
  • nm_gfx3.rom
  • nm_gfx5.rom
  • nm_gfx7.rom
  • nme_30a.rom
  • nme_31a.rom
  • nme_35a.rom
  • nme_36a.rom
  • roms/nemo.zip
    .zip
  • nm_09.rom
  • nm_18.rom
  • nm_19.rom
  • nm_32.rom
  • nm_gfx1.rom
  • nm_gfx3.rom
  • nm_gfx5.rom
  • nm_gfx7.rom
  • nme_30a.rom
  • nme_31a.rom
  • nme_35a.rom
  • nme_36a.rom
  • roms/neogeo.zip
    .zip
  • neo-geo.rom
  • ng-lo.rom
  • ng-sfix.rom
  • ng-sm1.rom