Overview

overview

3

Static

static

3

e065fa104f...18.exe

windows7-x64

3

e065fa104f...18.exe

windows10-2004-x64

3

$0/questbrwsearch.dll

windows7-x64

1

$0/questbrwsearch.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e065fa104fb6002e88eb80fb5f80a0bb_JaffaCakes118

  • Size

    500KB

  • MD5

    e065fa104fb6002e88eb80fb5f80a0bb

  • SHA1

    62bcef2dc7fbe3041a7f64a5734867cbea50c5d1

  • SHA256

    46fe2e9ef0782db60d0e92fbda351278d4fd9b8c1b58d0db139892026406cdd4

  • SHA512

    b7f28c0a5cc9c96be9a57666fe392a523fa0152bfec3e8752026df9f2b0e91839b036cdc6aabe7da302271098a782a26a8ea2316959f625a35388e80fee90dff

  • SSDEEP

    6144:ReSQEujyj3OGAOES+qOeBwW85ifoGq6u01lAKgn9Q2vwORhl4B2ohNwSu:DrujyiOES+HeBw5igt6b1b32vw6noLu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • e065fa104fb6002e88eb80fb5f80a0bb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/questbrwsearch.dll
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp