Overview

overview

7

Static

static

3

cde772808f...18.exe

windows7-x64

7

cde772808f...18.exe

windows10-2004-x64

7

$2/msimg32.dll

windows7-x64

3

$2/msimg32.dll

windows10-2004-x64

3

$3/msimg32.dll

windows7-x64

3

$3/msimg32.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

MLServ.exe

windows7-x64

3

MLServ.exe

windows10-2004-x64

3

MessengerLog.chm

windows7-x64

1

MessengerLog.chm

windows10-2004-x64

1

MessengerLog.exe

windows7-x64

3

MessengerLog.exe

windows10-2004-x64

3

MlogLoader.exe

windows7-x64

3

MlogLoader.exe

windows10-2004-x64

3

MlogUploader.exe

windows7-x64

3

MlogUploader.exe

windows10-2004-x64

3

RichEdMonitor.dll

windows7-x64

3

RichEdMonitor.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

msimg32.dll

windows7-x64

3

msimg32.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    cde772808fa3f403fad6c4c9f506997b_JaffaCakes118

  • Size

    928KB

  • MD5

    cde772808fa3f403fad6c4c9f506997b

  • SHA1

    b9a03c2b4899b1d10f8893a58aa0690f852064e2

  • SHA256

    866ea9e6255d892a6efae951902823113d2e77701845d8313e1535bc4615e7c1

  • SHA512

    21f3236b97e00d05f0771b6a7ca35e26e7ed14be893eba03bc4be97ddd024f74c62dc420a9fa5d6bacc5c4e0aad7b1795b87d828cd795dac2ee89d9f9d10ecae

  • SSDEEP

    24576:LdWZKFbCiGmuP3h2sb39m2CQ0Y28A7P/fqB+JX6SE:xWZKFmrNp41QX4vqBS6SE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • cde772808fa3f403fad6c4c9f506997b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $2/msimg32.dll
    .dll windows:4 windows x86 arch:x86

    a8fbd169da2ab231206783e753a0d76c


    Headers

    Imports

    Exports

    Sections

  • $3/msimg32.dll
    .dll windows:4 windows x86 arch:x86

    a8fbd169da2ab231206783e753a0d76c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MLServ.exe
    .exe windows:4 windows x86 arch:x86

    781a9678a3a6f6b60b6fb74eb586df28


    Headers

    Imports

    Sections

  • MessengerLog.chm
    .chm
  • MessengerLog.exe
    .exe windows:4 windows x86 arch:x86

    7cd83b6cfbf44898698046d361d84d4f


    Headers

    Imports

    Sections

  • MlogLoader.exe
    .exe windows:4 windows x86 arch:x86

    681ecad9d0c89a6cfb0fb5c1b239ffea


    Headers

    Imports

    Sections

  • MlogUploader.exe
    .exe windows:4 windows x86 arch:x86

    78ab7ea35a7f873708b8eb109357ad9f


    Headers

    Imports

    Sections

  • RichEdMonitor.dll
    .dll windows:4 windows x86 arch:x86

    98e8e809a946e42cbac0c375757ae569


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • msimg32.dll
    .dll windows:4 windows x86 arch:x86

    a8fbd169da2ab231206783e753a0d76c


    Headers

    Imports

    Exports

    Sections