Overview

overview

6

Static

static

3

esrtskm.dll

windows7-x64

6

esrtskm.dll

windows10-2004-x64

6

esrtskmuninst.exe

windows7-x64

4

esrtskmuninst.exe

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    f661b95702a38aef8e8d3203b1abaaa8_JaffaCakes118

  • Size

    560KB

  • MD5

    f661b95702a38aef8e8d3203b1abaaa8

  • SHA1

    15645a85d68dbb75fcbabd67932d169dbf1420ed

  • SHA256

    793a82a5afc09029c9a71de717d7abf5a613e4f44daf71701bf4e72587eac547

  • SHA512

    a1980c2be61b8604389d58349e50134fcda3671b7b109c25ed23a17a81debd9333f5b41ace6d543dfa560492cb563d1a6b16b2f43381117e6f7cf54e8b883025

  • SSDEEP

    12288:SOujwMF6Z239bN5DR2a+Y3YKANpLGgtcJ8d92d+xzTJLOe0:mLN5DYHbLtH92UxzNLi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f661b95702a38aef8e8d3203b1abaaa8_JaffaCakes118
    .zip
  • esrtskm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • esrtskmuninst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections