Overview

overview

7

Static

static

3

be4d32afdf...18.exe

windows7-x64

3

be4d32afdf...18.exe

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...lp.dll

windows7-x64

3

$PLUGINSDI...lp.dll

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...mp.dll

windows7-x64

3

$PLUGINSDI...mp.dll

windows10-2004-x64

3

OpenCandy/...lp.dll

windows7-x64

3

OpenCandy/...lp.dll

windows10-2004-x64

7

winamp.exe

windows7-x64

winamp.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    be4d32afdfa743a3046a977ffda0accd_JaffaCakes118

  • Size

    1021KB

  • MD5

    be4d32afdfa743a3046a977ffda0accd

  • SHA1

    0c0722d80f7e529e84c9cae19d8efffafe752f04

  • SHA256

    9d2ad0b73b086d58d46ddb16340ce2f83c88fcc2004948c9fb660a26b164aa7a

  • SHA512

    b4f1009e2cb4d45648a7d4bc176881d518355a799e3b77de03633811cee0deed8bc08349fe40aa7091977cafc581ddb6d9b9ce770d72bead568162ed9bd04636

  • SSDEEP

    24576:tmJhI8hVOYnXom1Z04YjrPXh0gRC1t2RcJgHKdxSK/2dtDBQ3m:tN+LnXoI04A5b2tKcJnn2dtDcm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • be4d32afdfa743a3046a977ffda0accd_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Dialer.dll
    .dll windows:5 windows x86 arch:x86

    08b0635362e7aeb50569ca1a61d5a13f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:5 windows x86 arch:x86

    cbc66eb3222e3fcdbee2e18ba7195f5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll windows:5 windows x86 arch:x86

    7608b8bb4c1c73944e087294dd00fb9f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    6c41c5e4d44f55745b925cc4e42b7fab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_winamp.dll
    .dll windows:4 windows x86 arch:x86

    a88d5dd1652a6846cfc944c29f1e3538


    Headers

    Imports

    Exports

    Sections

  • $_28_
  • OpenCandy/OCSetupHlp.dll
    .dll windows:5 windows x86 arch:x86

    7608b8bb4c1c73944e087294dd00fb9f


    Headers

    Imports

    Exports

    Sections

  • winamp.exe
    .exe windows:5 windows x86 arch:x86

    a642158410313cd3ac8e931bd01e8d95


    Headers

    Imports

    Exports

    Sections