Overview

overview

7

Static

static

3

fbe1f6c421...18.exe

windows7-x64

7

fbe1f6c421...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...FC.dll

windows7-x64

3

$PLUGINSDI...FC.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

TaskScheduler.exe

windows7-x64

3

TaskScheduler.exe

windows10-2004-x64

3

help.chm

windows7-x64

1

help.chm

windows10-2004-x64

1

ijl15.dll

windows7-x64

3

ijl15.dll

windows10-2004-x64

3

setalc.exe

windows7-x64

3

setalc.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

svconn.exe

windows7-x64

3

svconn.exe

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbe1f6c421b68dea484f5953003da488_JaffaCakes118

  • Size

    11.5MB

  • MD5

    fbe1f6c421b68dea484f5953003da488

  • SHA1

    2f4a332874f789bd750336c9f260b229da2e2917

  • SHA256

    019182318722fd8f9de33acb38c572d1110358f482ecf27f35ca9e558ed48797

  • SHA512

    94aa61f4d7715e3e9fd1bfe76d56a4c84bec6a315c92204cfdccd6745c2989f59cece10f14303a98c165c5ee3b5c41c8cc1b00871daad68d8631fe2a6c0d6dbf

  • SSDEEP

    98304:MMBazXzHDmy2z1MNG72QwN0YZth3aL21AobhTEL1RC7FbnCrYLO:dYzk77xwN0YZtoaRTERQxnCv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs
    installer

Files

  • fbe1f6c421b68dea484f5953003da488_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleFC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioA.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • TaskScheduler.exe
    .exe windows:5 windows x86 arch:x86

    948a8f705689932c49680cadfa68fc6f


    Headers

    Imports

    Exports

    Sections

  • help.chm
    .chm
  • ijl15.dll
    .dll windows:4 windows x86 arch:x86

    b877bf931ed6c0e6572b8edc29844947


    Headers

    Imports

    Exports

    Sections

  • setalc.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • svconn.exe
    .exe windows:5 windows x86 arch:x86

    aec6d11e1ef24fe99dda5965822a5d52


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections