Overview

overview

7

Static

static

3

da1c51d02c...18.exe

windows7-x64

7

da1c51d02c...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Virus3Out.exe

windows7-x64

3

Virus3Out.exe

windows10-2004-x64

3

Virus3OutLaunch.exe

windows7-x64

3

Virus3OutLaunch.exe

windows10-2004-x64

7

Virus3OutUp.exe

windows7-x64

3

Virus3OutUp.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    da1c51d02cbd506998463461825e3c68_JaffaCakes118

  • Size

    2.4MB

  • MD5

    da1c51d02cbd506998463461825e3c68

  • SHA1

    ead561b0195a77a06669efda0dfc4f46f67f0cc3

  • SHA256

    196d4fba41d8784df019ee5c5feb0147a282dc9cd4cfca543c05d809d4567a1e

  • SHA512

    c4dfdb647c1bdb960a3b4710d6d6a3275359b1072a16a6e63f5e577637dd575347712e878d7f4bcc5e1a5c63becfd3b66083b2d70a5e14f8406edebf32aab0c1

  • SSDEEP

    49152:zeiZYC3EhbPIbYFB36MACX7kBIWORDAolIomfto69Zy2Zumlo9cS:eC0h0YD31/oBIWORpilP9sp2o9cS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • da1c51d02cbd506998463461825e3c68_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Virus3Out.exe
    .exe windows:4 windows x86 arch:x86

    05c3c5f4479df5b9a7c7abc27b8d91c3


    Headers

    Imports

    Sections

  • Virus3OutLaunch.exe
    .exe windows:4 windows x86 arch:x86

    5b12935f7fc44fcf7064e0c002af101c


    Headers

    Imports

    Sections

  • Virus3OutUp.exe
    .exe windows:4 windows x86 arch:x86

    e012487716932ef2123d09947917fd68


    Headers

    Imports

    Sections

  • data/dt.cab
    .cab
  • updated_file.dat
  • updated_folder.dat
  • updated_name.dat
  • updated_reg.dat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections