Overview

overview

3

Static

static

3

bed2cc8fb8...18.exe

windows7-x64

3

bed2cc8fb8...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

Scripts/MC...RS.dll

windows7-x64

3

Scripts/MC...RS.dll

windows10-2004-x64

3

Scripts/MC...DX.dll

windows7-x64

3

Scripts/MC...DX.dll

windows10-2004-x64

3

Scripts/MC...WS.dll

windows7-x64

3

Scripts/MC...WS.dll

windows10-2004-x64

3

Scripts/MC...PS.dll

windows7-x64

3

Scripts/MC...PS.dll

windows10-2004-x64

3

Scripts/MS...rs.dll

windows7-x64

3

Scripts/MS...rs.dll

windows10-2004-x64

3

Scripts/MS...og.dll

windows7-x64

3

Scripts/MS...og.dll

windows10-2004-x64

3

Scripts/MS...dx.dll

windows7-x64

3

Scripts/MS...dx.dll

windows10-2004-x64

3

Scripts/MS...Ln.dll

windows7-x64

3

Scripts/MS...Ln.dll

windows10-2004-x64

3

Scripts/MS...ws.dll

windows7-x64

3

Scripts/MS...ws.dll

windows10-2004-x64

3

Scripts/No...dx.dll

windows7-x64

3

Scripts/No...dx.dll

windows10-2004-x64

3

Scripts/No...ws.dll

windows7-x64

3

Scripts/No...ws.dll

windows10-2004-x64

3

dll/BARS.dll

windows7-x64

3

dll/BARS.dll

windows10-2004-x64

3

dll/MDX.dll

windows7-x64

3

dll/MDX.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bed2cc8fb82fa7423f03bb2969e943a1_JaffaCakes118

  • Size

    500KB

  • MD5

    bed2cc8fb82fa7423f03bb2969e943a1

  • SHA1

    0da2f61bf6e7502aabe3a7d289efeac5fd955316

  • SHA256

    d59af41c2732c8fb009282e233eae34691a0ce208b3fa322b61a21d89f4d36a7

  • SHA512

    c741e4cca8a156f1ee79f15b41927d0356223b2dd15dd7d584561adfb54142bfed73d51d2f43079b2f49210577c7acfddf7664ed3f5ba6107582c19108932030

  • SSDEEP

    6144:gsi6cWeJrHB4/P6DquiBuQR+4Y3hHPnkbG38zRarD/bhzLquS2gO8YNVTf4Z/Wr4:66IJruX9ui8ynYRMblylvd8EEZ/WKstw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • bed2cc8fb82fa7423f03bb2969e943a1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Away.ini
  • Scripts/MCMP3/dlls/mdx/BARS.MDX
    .dll windows:4 windows x86 arch:x86

    99eee5c933b3e274b3f9aa164c57762c


    Headers

    Imports

    Exports

    Sections

  • Scripts/MCMP3/dlls/mdx/MDX.DLL
    .dll windows:4 windows x86 arch:x86

    34b86dab5c0b41a24220fe3732aef3a1


    Headers

    Imports

    Exports

    Sections

  • Scripts/MCMP3/dlls/mdx/VIEWS.MDX
    .dll windows:4 windows x86 arch:x86

    07056cc36c129798d605c78512f748e3


    Headers

    Imports

    Exports

    Sections

  • Scripts/MCMP3/dlls/popups/POPUPS.DLL
    .dll windows:4 windows x86 arch:x86

    3a10814cb4c1ecb8f052f0ca2be9a655


    Headers

    Imports

    Exports

    Sections

  • Scripts/MSNmIRC/dll/bars.mdx
    .dll windows:4 windows x86 arch:x86

    99eee5c933b3e274b3f9aa164c57762c


    Headers

    Imports

    Exports

    Sections

  • Scripts/MSNmIRC/dll/dialog.mdx
    .dll windows:4 windows x86 arch:x86

    252fa339fb91c0295d5e0b214a533f22


    Headers

    Imports

    Exports

    Sections

  • Scripts/MSNmIRC/dll/mdx.dll
    .dll windows:4 windows x86 arch:x86

    34b86dab5c0b41a24220fe3732aef3a1


    Headers

    Imports

    Exports

    Sections

  • Scripts/MSNmIRC/dll/nHTMLn.dll
    .dll windows:4 windows x86 arch:x86

    0a1f3160b852737d51568d1c50e67bdf


    Headers

    Imports

    Exports

    Sections

  • Scripts/MSNmIRC/dll/views.mdx
    .dll windows:4 windows x86 arch:x86

    07056cc36c129798d605c78512f748e3


    Headers

    Imports

    Exports

    Sections

  • Scripts/Notify/dll/mdx.dll
    .dll windows:4 windows x86 arch:x86

    34b86dab5c0b41a24220fe3732aef3a1


    Headers

    Imports

    Exports

    Sections

  • Scripts/Notify/dll/views.mdx
    .dll windows:4 windows x86 arch:x86

    07056cc36c129798d605c78512f748e3


    Headers

    Imports

    Exports

    Sections

  • dll/BARS.MDX
    .dll windows:4 windows x86 arch:x86

    99eee5c933b3e274b3f9aa164c57762c


    Headers

    Imports

    Exports

    Sections

  • dll/MDX.DLL
    .dll windows:4 windows x86 arch:x86

    34b86dab5c0b41a24220fe3732aef3a1


    Headers

    Imports

    Exports

    Sections

  • dll/POPUPS.DLL
    .dll windows:4 windows x86 arch:x86

    3a10814cb4c1ecb8f052f0ca2be9a655


    Headers

    Imports

    Exports

    Sections

  • dll/VIEWS.MDX
    .dll windows:4 windows x86 arch:x86

    07056cc36c129798d605c78512f748e3


    Headers

    Imports

    Exports

    Sections

  • dll/dialog.mdx
    .dll windows:4 windows x86 arch:x86

    252fa339fb91c0295d5e0b214a533f22


    Headers

    Imports

    Exports

    Sections

  • dll/listfiles.dll
    .dll windows:4 windows x86 arch:x86

    cf87e96b4a58f38f90a792995aa4a4a6


    Headers

    Imports

    Exports

    Sections

  • dll/mdx.cnt
  • dll/nHTMLn.dll
    .dll windows:4 windows x86 arch:x86

    0a1f3160b852737d51568d1c50e67bdf


    Headers

    Imports

    Exports

    Sections

  • images/Icones/ASCII.ico
  • images/Icones/Aide.ico
  • images/Icones/Antispam.ico
  • images/Icones/BNC.ico
  • images/Icones/Compagnons.ico
  • images/Icones/Config.ico
  • images/Icones/Connecte.ico