Overview

overview

7

Static

static

3

de95897df5...18.exe

windows7-x64

7

de95897df5...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$TEMP/~nsi...44.dll

windows7-x64

3

$TEMP/~nsi...44.dll

windows10-2004-x64

3

Cloud-Web_2_44.dll

windows7-x64

6

Cloud-Web_2_44.dll

windows10-2004-x64

6

Cloud-Web_...44.dll

windows7-x64

3

Cloud-Web_...44.dll

windows10-2004-x64

3

Cloud-Web_run.exe

windows7-x64

3

Cloud-Web_run.exe

windows10-2004-x64

3

Cloud-Web_...44.exe

windows7-x64

3

Cloud-Web_...44.exe

windows10-2004-x64

3

Cloud-Web_tb_2_44.dll

windows7-x64

3

Cloud-Web_tb_2_44.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de95897df511d95caa3ba3de44680e9b_JaffaCakes118

  • Size

    641KB

  • MD5

    de95897df511d95caa3ba3de44680e9b

  • SHA1

    1968b6e7ff09f8a51583dec455e38dee647b8c80

  • SHA256

    4243973c45b9052878644c7b30a05e9640844ae55e43998945685f80e8fa64dc

  • SHA512

    af576764cc68e7a7bda2a48e2ee9c0eb726726c62ca096d9df10de1905e2168596fba95589a71f06d1f8ec758e126e8b400ef8366327deb77f8db9d7a747ab30

  • SSDEEP

    12288:uSQvCetyQ/j8olI+jUxZBvT51V8Xb2egbbyQ/j8Xla+j8sDguxeb:uFxtyO8kI5xZ5FY7uyO8Va3pukb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • de95897df511d95caa3ba3de44680e9b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $TEMP/~nsis/Cloud-Web_nad_2_44.dll
    .dll windows:4 windows x86 arch:x86

    b5d56f3873eb8d48ca18c9b68bc9a96b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_2_44.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    3349570131fbaa69ef5ccbf0c5cb1ade


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_nad_2_44.dl_
    .dll windows:4 windows x86 arch:x86

    b5d56f3873eb8d48ca18c9b68bc9a96b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_run.ex_
    .exe windows:4 windows x86 arch:x86

    4fd43891ef6b31f90b7c50305f05e318


    Code Sign

    Headers

    Imports

    Sections

  • Cloud-Web_svc_2_44.ex_
    .exe windows:4 windows x86 arch:x86

    e3b053e94ff4fa72ae4e85e5be2331ab


    Code Sign

    Headers

    Imports

    Sections

  • Cloud-Web_tb_2_44.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    62aae4a780185490b96a2db14f7f901b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cloud_uins.dat.nsis
  • uninst.exe.nsis