Overview

overview

7

Static

static

3

d21e1d2c8e...18.exe

windows7-x64

7

d21e1d2c8e...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDIR/nsWeb.dll

windows7-x64

3

$PLUGINSDIR/nsWeb.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d21e1d2c8ef46221f18bf83e022f1687_JaffaCakes118

  • Size

    74KB

  • MD5

    d21e1d2c8ef46221f18bf83e022f1687

  • SHA1

    626dbdaa7beefbf63683d01bbb93eda9e78ad94f

  • SHA256

    16830437c5003523c7449417b1268aaafedebabb13fef44b692302d541a482ea

  • SHA512

    b1770eff005d48e22ec8c664e286e92d857eac182dcef3280df7bee3092738a4cbd45272ba80114c04e91f1995303930233bd814cf926f5c534e78c68e61ef52

  • SSDEEP

    1536:5oLDYsacy7mHMowHjXJuF5sdiLZVgHrmyvgHiHzb7ZXdlihA:5oPyys5jXJuF5ZLZWHrmyvQA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d21e1d2c8ef46221f18bf83e022f1687_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    2e4d94706c699d2da474aa823430b9a5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWeb.dll
    .dll windows:4 windows x86 arch:x86

    d12ed83df3a4aa87887f14a225ff95d4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections