Overview

overview

3

Static

static

3

e2166b580d...18.exe

windows7-x64

3

e2166b580d...18.exe

windows10-2004-x64

3

$0/basicscan.dll

windows7-x64

1

$0/basicscan.dll

windows10-2004-x64

1

$0/uninstall.exe

windows7-x64

$0/uninstall.exe

windows10-2004-x64

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e2166b580db868ac6c4a9e95fd61ec71_JaffaCakes118

  • Size

    945KB

  • MD5

    e2166b580db868ac6c4a9e95fd61ec71

  • SHA1

    c37ff2f2bf672f29c2853dc94eb4a068d72033ff

  • SHA256

    a7002a0a992d486709fef86088d1dfc96aa6af201b06a3e127896dcda7a9364c

  • SHA512

    bc787eebc1f9ac9364ab6e9916b101241325b18f6e2df6570f7de7404db5e01713e0c59e1e05e45033e4e4a1a2cd8ff19d5362518e28222ed03505905e32eee8

  • SSDEEP

    24576:pugQw86fDbSwdOuc3TAWi384ogLAImcTyqmS8LqjtiFcdx:4wZvM93TARMItOPuBdx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • e2166b580db868ac6c4a9e95fd61ec71_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4a9446e5cc2412c6405cea69dddb93be


    Headers

    Imports

    Sections

  • $0/basicscan.dll
  • $0/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp