Overview

overview

7

Static

static

3

d6259cad7d...18.exe

windows7-x64

7

d6259cad7d...18.exe

windows10-2004-x64

7

$PLUGINSDI...if.dll

windows7-x64

3

$PLUGINSDI...if.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...rl.dll

windows7-x64

3

$PLUGINSDI...rl.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

NSN-restore.pl

windows7-x64

3

NSN-restore.pl

windows10-2004-x64

3

execute.pl

windows7-x64

3

execute.pl

windows10-2004-x64

3

perl58.dll

windows7-x64

3

perl58.dll

windows10-2004-x64

3

test-Fw-NSN.pl

windows7-x64

3

test-Fw-NSN.pl

windows10-2004-x64

3

test-Fw-chin.pl

windows7-x64

3

test-Fw-chin.pl

windows10-2004-x64

3

test-Fw.pl

windows7-x64

3

test-Fw.pl

windows10-2004-x64

3

tftpnew.exe

windows7-x64

1

tftpnew.exe

windows10-2004-x64

3

wget.exe

windows7-x64

1

wget.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6259cad7dba6846db26cae312080a78_JaffaCakes118

  • Size

    647KB

  • MD5

    d6259cad7dba6846db26cae312080a78

  • SHA1

    c8fd90bae4d99f500bd988be4fa704d93f0c5725

  • SHA256

    3df8c6397421ca385bf7a48e87e5c9c90ddb922b6abc36443fc4fa7475815f5d

  • SHA512

    2385bd582d409398a1cf35aace08cc483c14cc5bf7fd792f17d3075a4a6d528041b8735b83c841b252c149da7773fb2a4c981535e67080c6640b8b3068726402

  • SSDEEP

    12288:QEdfhvF9L92SyaQCN85OsgC1qBcVUfnTa7v:QElJ92RzCNFDC1qBcYuT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d6259cad7dba6846db26cae312080a78_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    b4b71331b921e2f441a2b05306cd7dae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    54317f9e35e039c28fdb421cf518703e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsPerl.dll
    .dll windows:4 windows x86 arch:x86

    a33e2f0d742b613f98e859364f178033


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • BSNLSafe.GIF
    .gif
  • NSN-restore.pl
  • execute.pl
  • inprogress.gif
    .gif
  • perl58.dll
    .dll windows:4 windows x86 arch:x86

    29bd8a7a45bca16c193484e7927fe4ec


    Headers

    Imports

    Exports

    Sections

  • test-Fw-NSN.pl
  • test-Fw-chin.pl
  • test-Fw.pl
  • tftpnew.exe
    .exe windows:4 windows x86 arch:x86

    a8fe02b2102a5784ecd89d1c55231b66


    Headers

    Imports

    Sections

  • wait.gif
    .gif
  • wget.exe
    .exe windows:1 windows x86 arch:x86

    91afa2950fb9c03d392b295ce9394409


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.