Overview

overview

7

Static

static

3

df3ea94c4c...18.exe

windows7-x64

7

df3ea94c4c...18.exe

windows10-2004-x64

7

"Ancient_Spider.exe

windows7-x64

3

"Ancient_Spider.exe

windows10-2004-x64

3

"aminstall.dll

windows7-x64

3

"aminstall.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Xtras/DirectSound.dll

windows7-x64

3

Xtras/DirectSound.dll

windows10-2004-x64

3

Xtras/FILEIO.dll

windows7-x64

3

Xtras/FILEIO.dll

windows10-2004-x64

3

Xtras/Flash Asset.dll

windows7-x64

3

Xtras/Flash Asset.dll

windows10-2004-x64

3

Xtras/Java...er.dll

windows7-x64

3

Xtras/Java...er.dll

windows10-2004-x64

3

Xtras/SWADCmpr.dll

windows7-x64

3

Xtras/SWADCmpr.dll

windows10-2004-x64

3

Xtras/Soun...ol.dll

windows7-x64

3

Xtras/Soun...ol.dll

windows10-2004-x64

3

Xtras/budapi.dll

windows7-x64

3

Xtras/budapi.dll

windows10-2004-x64

3

dirapi.dll

windows7-x64

3

dirapi.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    df3ea94c4c4fa79b6ace86568aac540d_JaffaCakes118

  • Size

    5.5MB

  • MD5

    df3ea94c4c4fa79b6ace86568aac540d

  • SHA1

    7d666979743f0cf7805da83fad5bc20e774ddde0

  • SHA256

    75743eca1cceb9e07e4f966e537665fbdd4afabe39cfef7fa117f16bb50c5732

  • SHA512

    6dbf3feca6015fe4dcc5d561ad789c2258883d2845a7f330d3760c3f1c19b93be1d543e9fff7a57d66864dcd02c0eb0eb38a26b59372ac714b3ca296dba8921d

  • SSDEEP

    98304:uKF21TVEsV7nb09Xh1Ar1glWhxUYs+eVq3mYnuoGvpIsN2sdl6qHg3C5Jm:JQOsJbwx1G0os+d3muuoG3NQC5Jm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • df3ea94c4c4fa79b6ace86568aac540d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • "Ancient_Spider.exe"
    .exe windows:4 windows x86 arch:x86

    51c4e98e76bd946f81a1a9c26b55ce8b


    Headers

    Imports

    Sections

  • "aminstall.dll"
    .dll windows:4 windows x86 arch:x86

    39bf2f9400b25dffe6038f4810921a11


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    445ca064c668ebcb89957d525a8bef23


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Xtras/DirectSound.x32
    .dll windows:4 windows x86 arch:x86

    0bbfbf636680b8224b87e3871096b677


    Headers

    Imports

    Exports

    Sections

  • Xtras/FILEIO.X32
    .dll windows:1 windows x86 arch:x86

    77e98ac48c8e9485b6b4ed5afd295919


    Headers

    Imports

    Exports

    Sections

  • Xtras/Flash Asset.x32
    .dll windows:4 windows x86 arch:x86

    6317f45dc7fd15af672b01ccef700ff2


    Headers

    Imports

    Exports

    Sections

  • Xtras/JavaUiHelper.x32
    .dll windows:4 windows x86 arch:x86

    376c8ace8863d38be9ddafc6b26a19e9


    Headers

    Imports

    Exports

    Sections

  • Xtras/SWADCmpr.x32
    .dll windows:4 windows x86 arch:x86

    e754f4d9c06df1d7465c2056cd68787f


    Headers

    Imports

    Exports

    Sections

  • Xtras/Sound Control.x32
    .dll windows:4 windows x86 arch:x86

    6edd253b068bbe35d0eadf8c21d25599


    Headers

    Imports

    Exports

    Sections

  • Xtras/budapi.x32
    .dll windows:4 windows x86 arch:x86

    92adfb006945575093812c05f8b255e3


    Headers

    Imports

    Exports

    Sections

  • dirapi.dll
    .dll windows:4 windows x86 arch:x86

    adc944be32c98fb01c194191a67af888


    Headers

    Imports

    Sections

  • iml32.dll
    .dll windows:4 windows x86 arch:x86

    3b536cdeeee9dccfb205ba0b9e391b29


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • proj.dll
    .dll windows:4 windows x86 arch:x86

    f506e9039519ce6709545e3ddfdcbbfd


    Headers

    Imports

    Exports

    Sections