Overview

overview

7

Static

static

3

c085a92187...18.exe

windows7-x64

7

c085a92187...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

3

$R0.dll

windows10-2004-x64

3

$R2/NSIS.L...0_.exe

windows7-x64

1

$R2/NSIS.L...0_.exe

windows10-2004-x64

3

$TEMP/CloudTool.exe

windows7-x64

1

$TEMP/CloudTool.exe

windows10-2004-x64

3

$TEMP/LongRADrv.sys

windows7-x64

1

$TEMP/LongRADrv.sys

windows10-2004-x64

1

$TEMP/LongRADrv2K.sys

windows7-x64

1

$TEMP/LongRADrv2K.sys

windows10-2004-x64

1

7zxr.dll

windows7-x64

3

7zxr.dll

windows10-2004-x64

3

LongRADrv.sys

windows7-x64

1

LongRADrv.sys

windows10-2004-x64

1

LongRADrv2K.sys

windows7-x64

1

LongRADrv2K.sys

windows10-2004-x64

1

LongRAShell.exe

windows7-x64

3

LongRAShell.exe

windows10-2004-x64

3

cloud.exe

windows7-x64

3

cloud.exe

windows10-2004-x64

3

mycompress.dll

windows7-x64

3

mycompress.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

LongRADrv.sys

windows7-x64

1

LongRADrv.sys

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c085a92187e2c7d5fcdc82ed4668134f_JaffaCakes118

  • Size

    576KB

  • MD5

    c085a92187e2c7d5fcdc82ed4668134f

  • SHA1

    38aa9c6fde946645d57c6a4d48f7de005711e8c7

  • SHA256

    1a7ff8b17d703d84698d653da808832d3d81b946c5ed606f0e3d4676c1bd99d6

  • SHA512

    cbcfd3038838d4d63568873f6a6750ef27683a4f9271621a86f66b5feb86c725051dbacff2bdcb00ff664338b0a4165f519f011ef0d71a4302c5ffd222290276

  • SSDEEP

    12288:CCy5tfAtuLEl0EccdMpwq6Fp/V2GjsxuNYtXoXHdbHRZ6U+SLfwyM5:YtotuLERcWMpBk/V2GoIOoXdbxZbfwJ5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • c085a92187e2c7d5fcdc82ed4668134f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dirrequest.ini
  • $PLUGINSDIR/finishpage.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    71b96c20f41c554fe47775469ee75f18


    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v2.$_10_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • $TEMP/CloudTool.exe
    .exe windows:4 windows x86 arch:x86

    d05b2b602e175d015996aaa36db8ea83


    Headers

    Imports

    Sections

  • $TEMP/LongRADrv.sys
    .sys windows:5 windows x86 arch:x86

    9d84c537b746ad664460d13cb9164766


    Headers

    Imports

    Sections

  • $TEMP/LongRADrv2K.sys
    .sys windows:5 windows x86 arch:x86

    f18914fc152a1115707d57ce711ac6d4


    Headers

    Imports

    Sections

  • 7zxr.dll
    .dll windows:4 windows x86 arch:x86

    eff3a1ae69dddb7b3511eacc30ac7fe8


    Headers

    Imports

    Exports

    Sections

  • LongRADrv.sys
    .sys windows:5 windows x86 arch:x86

    9d84c537b746ad664460d13cb9164766


    Headers

    Imports

    Sections

  • LongRADrv2K.sys
    .sys windows:5 windows x86 arch:x86

    f18914fc152a1115707d57ce711ac6d4


    Headers

    Imports

    Sections

  • LongRAShell.exe
    .exe windows:4 windows x86 arch:x86

    2309644bffb9cd0d17a3516a5ba03cdd


    Headers

    Imports

    Sections

  • cloud.exe
    .exe windows:4 windows x86 arch:x86

    36375a8439baf0697dc29ec7fa731015


    Headers

    Imports

    Exports

    Sections

  • mycompress.dll
    .dll windows:4 windows x86 arch:x86

    8faa08ce18a3d5ab77da6bf288e7ab0c


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • LongRADrv.sys
    .sys windows:5 windows x86 arch:x86

    9d84c537b746ad664460d13cb9164766


    Headers

    Imports

    Sections

  • LongRADrv2K.sys
    .sys windows:5 windows x86 arch:x86

    f18914fc152a1115707d57ce711ac6d4


    Headers

    Imports

    Sections