Overview

overview

7

Static

static

3

c04dfcbb6d...18.exe

windows7-x64

7

c04dfcbb6d...18.exe

windows10-2004-x64

7

$PLUGINSDI...lf.dll

windows7-x64

3

$PLUGINSDI...lf.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

MyDefence.exe

windows7-x64

6

MyDefence.exe

windows10-2004-x64

6

MyDefenceMT.exe

windows7-x64

3

MyDefenceMT.exe

windows10-2004-x64

3

MyDefenceUI.exe

windows7-x64

3

MyDefenceUI.exe

windows10-2004-x64

3

MyDefenceUpdater.exe

windows7-x64

3

MyDefenceUpdater.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

lang/MyDefence.dll

windows7-x64

1

lang/MyDefence.dll

windows10-2004-x64

1

mydhis.dll

windows7-x64

3

mydhis.dll

windows10-2004-x64

3

mydidc.dll

windows7-x64

3

mydidc.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c04dfcbb6d81fe3ced31058ab57c54d2_JaffaCakes118

  • Size

    1.3MB

  • MD5

    c04dfcbb6d81fe3ced31058ab57c54d2

  • SHA1

    c98ef8419e5a8211515663736bb4b60445e28ca0

  • SHA256

    e35702ebc65e6e226a0c28a1fdda59e3fb20ca2282054eb6f014e4727c8fe888

  • SHA512

    9effb1eb5a130db1a67659d221491f0369acdd3ca06048aca5c3fc64b5b3119eeb3c7674d1d71ed0ab7baacc0c7b3896db64e79cc1d9b846de87df9a469afa89

  • SSDEEP

    24576:v/P+uVoalI+eVJosFpN1SkS1nJVr9X/UFDErJBjDnrOJ/REfst:KkI+e/osFpNUkS1JjsFIPO/d

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • c04dfcbb6d81fe3ced31058ab57c54d2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $APPDATA/MyDefence 3.5/Data/mydcls.myd
  • $APPDATA/MyDefence 3.5/Data/mydhis.myd
  • $APPDATA/MyDefence 3.5/Data/mydidc.myd
  • $APPDATA/MyDefence 3.5/Data/mydmwt.myd
  • $PLUGINSDIR/DelSelf.dll
    .dll windows:4 windows x86 arch:x86

    bac28ea78872bffbed51af33afc1b566


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ScrollLicense.dll
    .dll windows:4 windows x86 arch:x86

    241cd43f5540cd5c958a3c62d980c89c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • MyDefence.exe
    .exe windows:4 windows x86 arch:x86

    08c069b7aae671c257320c038051a737


    Headers

    Imports

    Sections

  • MyDefenceMT.exe
    .exe windows:4 windows x86 arch:x86

    60a2859c824b800fbe9b8a372b9c818e


    Headers

    Imports

    Sections

  • MyDefenceUI.exe
    .exe windows:4 windows x86 arch:x86

    9778324974676488bfefd1d58e58bffa


    Headers

    Imports

    Sections

  • MyDefenceUpdater.exe
    .exe windows:4 windows x86 arch:x86

    88c5d2c636715c672faa5160be5139b3


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    de9a1ba9aace5018787e8cd90b777b88


    Headers

    Imports

    Exports

    Sections

  • lang/MyDefence.lng
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mydhis.dll
    .dll windows:4 windows x86 arch:x86

    d1af31c77f2a93a27e4837140385ce3f


    Headers

    Imports

    Exports

    Sections

  • mydidc.dll
    .dll windows:4 windows x86 arch:x86

    848a7f0f574030639163ca0a3c1f5228


    Headers

    Imports

    Exports

    Sections