Overview

overview

8

Static

static

3

fa0ff1ca10...18.exe

windows7-x64

7

fa0ff1ca10...18.exe

windows10-2004-x64

8

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

6

$PLUGINSDI...ib.dll

windows10-2004-x64

6

$PLUGINSDI...st.dll

windows7-x64

3

$PLUGINSDI...st.dll

windows10-2004-x64

3

ISOMounter.exe

windows7-x64

3

ISOMounter.exe

windows10-2004-x64

3

guidlib.dll

windows7-x64

6

guidlib.dll

windows10-2004-x64

6

isoinst.dll

windows7-x64

3

isoinst.dll

windows10-2004-x64

3

sciter.dll

windows7-x64

3

sciter.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

x64/ibinldr.sys

windows7-x64

1

x64/ibinldr.sys

windows10-2004-x64

1

x86/ibinldr.sys

windows7-x64

1

x86/ibinldr.sys

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa0ff1ca1098aa22398801590e87d876_JaffaCakes118

  • Size

    2.3MB

  • MD5

    fa0ff1ca1098aa22398801590e87d876

  • SHA1

    99577ce4d609df1e76f007b290fd1b12b752793a

  • SHA256

    aba50aaf397ede3be29fd7802028d190137f9fe1f9b3c2bc1c55523c12a590bb

  • SHA512

    18035b95a7dd3933f37aadac3dceaa251248e96e6c3ce712b60657c2199965fbeb1f9978c0adf36325cfd6d3e44599cf3f93bdfa31bc2842713a2e3e23081f90

  • SSDEEP

    49152:JjZkbRnVmmTGRHhVKvDxVELMQ37INHRFXz86RJobbUWuJSI9mMZ:JWBoxH8D/VHX/JCbBYzmMZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • fa0ff1ca1098aa22398801590e87d876_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/guidlib.dll
    .dll windows:5 windows x86 arch:x86

    fd5eab6035adf1d1ce06809b1dd435f3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/isoinst.dll
    .dll windows:5 windows x86 arch:x86

    416af359629d3f36aeaf16cdb1b2d9ce


    Headers

    Imports

    Exports

    Sections

  • ISOMounter.exe
    .exe windows:6 windows x86 arch:x86

    6a073b8f40cb71e0e1508df47345d8db


    Headers

    Imports

    Sections

  • guidlib.dll
    .dll windows:5 windows x86 arch:x86

    fd5eab6035adf1d1ce06809b1dd435f3


    Headers

    Imports

    Exports

    Sections

  • isoinst.dll
    .dll windows:5 windows x86 arch:x86

    416af359629d3f36aeaf16cdb1b2d9ce


    Headers

    Imports

    Exports

    Sections

  • sciter.dat
  • sciter.dll
    .dll windows:5 windows x86 arch:x86

    580538c5def271f3317645e0ad611b53


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • x64/ibinldr.sys
    .sys windows:6 windows x64 arch:x64

    fd114cb4cf9543cdc9072698a34a9078


    Code Sign

    Headers

    Imports

    Sections

  • x86/ibinldr.sys
    .sys windows:6 windows x86 arch:x86

    9095a6a2c5f1d4b9e5814b0f217ead94


    Headers

    Imports

    Sections