Overview

overview

7

Static

static

3

d3b8236efb...18.exe

windows7-x64

7

d3b8236efb...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

LinuxLab VPN.exe

windows7-x64

3

LinuxLab VPN.exe

windows10-2004-x64

3

LinuxLab_Update.exe

windows7-x64

3

LinuxLab_Update.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3b8236efbc49edfd39d99a73ab0febb_JaffaCakes118

  • Size

    520KB

  • MD5

    d3b8236efbc49edfd39d99a73ab0febb

  • SHA1

    b3b46074d3474d9052e2f7cc0c29cd5f47cdf7a3

  • SHA256

    cc6694faa5e88f5f560245f41e29ecf920b5093f72e9e9894d1f42a3541ccbc3

  • SHA512

    0505e094fdca087e8b96dd3e1d9f54b5b6a83a37f431785566cfda12a71def8b120517daaf23f6a8ad02414b8478032417e4a73d5a6175165ffddd6c783547b4

  • SSDEEP

    12288:NCagRHqLNOmpTxWCCfi7fvmxtIL9BP2CFHa:NCagsZOA1qfmimRBPxFHa

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • d3b8236efbc49edfd39d99a73ab0febb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • LinuxLab VPN.exe
    .exe windows:4 windows x86 arch:x86

    67398909ed59033c1273cce872d884d0


    Headers

    Imports

    Sections

  • LinuxLab_Update.exe
    .exe windows:4 windows x86 arch:x86

    672f4c2e5353c25057e7d63ed731a611


    Headers

    Imports

    Sections

  • LinuxLab_Update.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections