Overview

overview

7

Static

static

3

155�...վ.url

windows7-x64

1

155�...վ.url

windows10-2004-x64

1

FolderArmor.exe

windows7-x64

7

FolderArmor.exe

windows10-2004-x64

7

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Clear.exe

windows7-x64

3

Clear.exe

windows10-2004-x64

3

CtxMenu.dll

windows7-x64

3

CtxMenu.dll

windows10-2004-x64

3

FolderArmor.dll

windows7-x64

6

FolderArmor.dll

windows10-2004-x64

6

FolderArmor.exe

windows7-x64

6

FolderArmor.exe

windows10-2004-x64

6

FolderLockHelp.chm

windows7-x64

1

FolderLockHelp.chm

windows10-2004-x64

1

RegInfo.exe

windows7-x64

4

RegInfo.exe

windows10-2004-x64

4

UnInstall.exe

windows7-x64

7

UnInstall.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

UninstallPro.exe

windows7-x64

3

UninstallPro.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee7ed009a89579b683c9bfacaa05f6ba_JaffaCakes118

  • Size

    2.0MB

  • MD5

    ee7ed009a89579b683c9bfacaa05f6ba

  • SHA1

    fe7823ae36e782b12591a1d65708395aec394162

  • SHA256

    a67281d900d1640bd9d348fcb3e7bc0bcbbb5cc9ae56cfb67da81e973cf4c003

  • SHA512

    b045321bdae0df31d2d87523b455f0a72ef8c77ceacb65c8727ef845cfeaedc1e934b431a24dedeb6efb5aa5804975d6ae8d22a43f65d6c22c96110b43df4da1

  • SSDEEP

    49152:1+bKSRfbKJof6NlGiPo+XlEATt7vY3wBDbhDecLk14KkWKi/m77+GMm:1+bKmfbFf6CiRna3EUcLkpw577+e

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • ee7ed009a89579b683c9bfacaa05f6ba_JaffaCakes118
    .zip
  • 155ɫվ.url
    .url
  • FolderArmor.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:5 windows x86 arch:x86

    18323a9b4dffb5fab0a7a28a154efdfd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_splash.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • Clear.exe
    .exe windows:4 windows x86 arch:x86

    e45e51e2acaee81e23a0cb72b8a5283b


    Headers

    Imports

    Sections

  • CtxMenu.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    358bd8374ab3aee68019d155a31543c9


    Headers

    Imports

    Exports

    Sections

  • FolderArmor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ac75e20837fefd8639e15aaa3abaf364


    Headers

    Imports

    Exports

    Sections

  • FolderArmor.exe
    .exe windows:5 windows x86 arch:x86

    c4d5091b84bb581b9fae7354e6d2d038


    Headers

    Imports

    Sections

  • FolderLockHelp.chm
    .chm
  • RailFox.ico
  • RealFolderLock.ico
  • RegInfo.exe
    .exe windows:4 windows x86 arch:x86

    ab9db831add6047abc1c372832bbf66b


    Headers

    Imports

    Sections

  • UnInstall.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • UninstallPro.exe
    .exe windows:5 windows x86 arch:x86

    3a8b5c08daca2457f791972c31efe337


    Headers

    Imports

    Sections

  • Lz0/Linezer0.txt