Overview

overview

7

Static

static

3

d2eace7d50...18.exe

windows7-x64

7

d2eace7d50...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$TEMP/~nsi...43.dll

windows7-x64

3

$TEMP/~nsi...43.dll

windows10-2004-x64

3

Cloud-Web_2_43.dll

windows7-x64

6

Cloud-Web_2_43.dll

windows10-2004-x64

6

Cloud-Web_...43.dll

windows7-x64

3

Cloud-Web_...43.dll

windows10-2004-x64

3

Cloud-Web_run.exe

windows7-x64

3

Cloud-Web_run.exe

windows10-2004-x64

3

Cloud-Web_...43.exe

windows7-x64

3

Cloud-Web_...43.exe

windows10-2004-x64

3

Cloud-Web_tb_2_43.dll

windows7-x64

3

Cloud-Web_tb_2_43.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2eace7d509b5783ae9e92121b2fd920_JaffaCakes118

  • Size

    634KB

  • MD5

    d2eace7d509b5783ae9e92121b2fd920

  • SHA1

    b05e3cc9b5af41ba580cd7351b96804758232f0f

  • SHA256

    d2ef89a6b6b7ad5a290d6591c000db80b084ed983f531f684e84d2603678505e

  • SHA512

    92f2c011139f2ec3142011233e7a89496ca8cae4b669665193f703711f4c96c21cbb1bfaf2738ba991ca89bea7303ff8868981af41cab9ed760e0c026450aea0

  • SSDEEP

    12288:BTeeFtD9VhDBi3Gi0eqWdICZLNessNXfJdD9VhSB8uYrmUr0ad0:AEXXBnhWKCL2PJnWB8uYPr0au

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d2eace7d509b5783ae9e92121b2fd920_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $TEMP/~nsis/Cloud-Web_nad_2_43.dll
    .dll windows:4 windows x86 arch:x86

    b79f08af13de6417f5936a5c864c6804


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_2_43.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    3349570131fbaa69ef5ccbf0c5cb1ade


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_nad_2_43.dl_
    .dll windows:4 windows x86 arch:x86

    b79f08af13de6417f5936a5c864c6804


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_run.ex_
    .exe windows:4 windows x86 arch:x86

    4fd43891ef6b31f90b7c50305f05e318


    Code Sign

    Headers

    Imports

    Sections

  • Cloud-Web_svc_2_43.ex_
    .exe windows:4 windows x86 arch:x86

    79e7f71e7986dc215e54fa43eddefde1


    Code Sign

    Headers

    Imports

    Sections

  • Cloud-Web_tb_2_43.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    62aae4a780185490b96a2db14f7f901b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cloud_uins.dat.nsis
  • uninst.exe.nsis