Overview

overview

3

Static

static

3

dd05d85a28...18.exe

windows7-x64

3

dd05d85a28...18.exe

windows10-2004-x64

3

$0/questresult.dll

windows7-x64

1

$0/questresult.dll

windows10-2004-x64

1

$0/uninstall.exe

windows7-x64

3

$0/uninstall.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd05d85a2860b8d0fdf98526d056da99_JaffaCakes118

  • Size

    647KB

  • MD5

    dd05d85a2860b8d0fdf98526d056da99

  • SHA1

    bdfcb19117c26a23a5792c7bb389095ea72f299f

  • SHA256

    bf72fe363107ceb3d24b8762542d7d1c1c0aaa8136c98e5cd7aca3cdba46e53d

  • SHA512

    b3c3ff319ee06ae8343992aee5a9129ecd2cc11a27dba608fcfc46cb38423cba88d353e124bcdfe93bd90e59c1085a87c94069ad8a89416e578475e37c5d8e25

  • SSDEEP

    12288:YSI+jMP5lNpCfy/iiLVsJKhXlTsMn6P5p7IT3/JTaoGMBMQOG1P9iTvV4Y:YSKjbCfK1Lq6tsM6/7FxGMQVa7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • dd05d85a2860b8d0fdf98526d056da99_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questresult.dll
  • $0/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/DIALOG/105
  • .rsrc/DIALOG/106
  • .rsrc/DIALOG/107
  • .rsrc/DIALOG/111
  • .rsrc/GROUP_ICON/103
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2.ico
  • .rsrc/ICON/3.ico
  • .rsrc/ICON/4.ico
  • .rsrc/ICON/5.ico
  • .rsrc/ICON/6.ico
  • .rsrc/ICON/7.ico
  • .rsrc/MANIFEST/1
    .xml
  • .text
  • [0]
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp