Overview

overview

7

Static

static

3

d21f6aac86...18.exe

windows7-x64

7

d21f6aac86...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

3

$R0.dll

windows10-2004-x64

3

$R2/NSIS.L...4_.exe

windows7-x64

1

$R2/NSIS.L...4_.exe

windows10-2004-x64

3

feedback.exe

windows7-x64

3

feedback.exe

windows10-2004-x64

3

msvbvm60.dll

windows7-x64

3

msvbvm60.dll

windows10-2004-x64

3

ocfunnydic...gs.exe

windows7-x64

3

ocfunnydic...gs.exe

windows10-2004-x64

3

ocfunnydice-trial.exe

windows7-x64

3

ocfunnydice-trial.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d21f6aac866dfdede4593c87806cea2e_JaffaCakes118

  • Size

    942KB

  • MD5

    d21f6aac866dfdede4593c87806cea2e

  • SHA1

    059d2ed50d2a227e7a45ea266726f8d60fa1f6a8

  • SHA256

    9c38c5c411997ff4fdc8bafbaf36cef4238a2a5251bdbdaedccc7e2bfd3174c4

  • SHA512

    256b6fa8cf172aea44cff0ab66023407470dc51e068b1e7d63af389099d44edec9fbc4f3333e2b413dd29dec74b6df789826b3b79962738dde2041b71bdee4bb

  • SSDEEP

    24576:dTTq+B9+a0WzMonQbCou6Hf8WXdUq05GemSiWP:JBUazzMonpN6/ZiqOVHP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • d21f6aac866dfdede4593c87806cea2e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    5d13f1b45437e48acf7175e1471cd9aa


    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_4_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • EULA.txt
  • feedback.exe
    .exe windows:4 windows x86 arch:x86

    1582e60cfab50dac51d15477a3161b67


    Headers

    Imports

    Sections

  • msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5d13f1b45437e48acf7175e1471cd9aa


    Headers

    Imports

    Exports

    Sections

  • ocfunnydice-settings.exe
    .exe windows:4 windows x86 arch:x86

    a08f0541406e606dfd09cfa398466298


    Headers

    Imports

    Sections

  • ocfunnydice-trial.exe
    .exe windows:4 windows x86 arch:x86

    6938cf865a24bc177112721875e4604f


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections