Overview

overview

7

Static

static

3

be8c7260ff...18.exe

windows7-x64

7

be8c7260ff...18.exe

windows10-2004-x64

7

$1/$APPDAT...er.exe

windows7-x64

7

$1/$APPDAT...er.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$1/MediaPl...on.exe

windows7-x64

3

$1/MediaPl...on.exe

windows10-2004-x64

3

$1/MediaPl...ff.exe

windows7-x64

3

$1/MediaPl...ff.exe

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/mplayerc.exe

windows7-x64

3

$R1/mplayerc.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    be8c7260ff55348927ac303c20dc7fb2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    be8c7260ff55348927ac303c20dc7fb2

  • SHA1

    73335afb9207f8335613e9ce07df822cfe30af7e

  • SHA256

    ff025f8c202f6e3d3e2e8d0f934fb974534092e7d2a69465eb6ae30c557b345a

  • SHA512

    8dfb8d9ee9954c0811c8d410357094991e52740b000553a222205f89d340453317e8035e9f8e00f28339ecbf377bd7146f40332b1597a7a8ba84641d80b1acc7

  • SSDEEP

    49152:CgWFAS1CetCGJTt2MOSzSAUXMQU2NjXJw0FmWYSx4SJvJ7ZRLeduw:ut1T9t2MOSfmMLWjXJw0FmWYQvJtgduw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • be8c7260ff55348927ac303c20dc7fb2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $1/$APPDATA/MediaPlayerApplication2/uninstaller.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $1/MediaPlayerApplication.exe
    .exe windows:5 windows x86 arch:x86

    5a0268f906bd2e03361fb9ac06c7c894


    Headers

    Imports

    Sections

  • $1/MediaPlayerInstallerStuff.exe
    .exe windows:6 windows x86 arch:x86

    84a2530b5a5345adb8d4094d644cdeee


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/mplayerc.exe
    .exe windows:5 windows x86 arch:x86

    d90a3033d76f73239d1a252247da3424


    Headers

    Imports

    Sections