Overview

overview

7

Static

static

3

d62a8929dc...18.exe

windows7-x64

3

d62a8929dc...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

ecodec.exe

windows7-x64

7

ecodec.exe

windows10-2004-x64

7

uninst.exe

windows7-x64

3

uninst.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d62a8929dc0387c983f7f645748dbf39_JaffaCakes118

  • Size

    73KB

  • MD5

    d62a8929dc0387c983f7f645748dbf39

  • SHA1

    b735ca370b22e9d181371bae44f15a0eb00b5a9f

  • SHA256

    291880323d01e29dcd6ce41414bfbc6a7a377ccdbbcc1becedf0f567a7188c46

  • SHA512

    7c83b146a7349df3083b36a2aa7f0a7466ce97274b58d3c69564ac87dcee45149a8ccffb09edb4d73da504fb2b290cb4bf1e8acc18108772ac49885062b26401

  • SSDEEP

    1536:tFXPgRBJgXzlS2o3YLH0QxccqI1IbgMbA66MBzFs43uoVv3E:t1EBJgXzxo38H0QxclFhAJMRFeod3E

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • d62a8929dc0387c983f7f645748dbf39_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Loader.dll
    .dll windows:4 windows x86 arch:x86

    938840dc9039af78f44096eaa64c2e0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/page.ReInstallUninstall.ini
  • ecodec.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-header.bmp