Overview

overview

7

Static

static

3

fc5410eacb...18.exe

windows7-x64

7

fc5410eacb...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$TEMP/~nsi...ad.dll

windows7-x64

3

$TEMP/~nsi...ad.dll

windows10-2004-x64

3

$WINDIR/Sy...vc.exe

windows7-x64

3

$WINDIR/Sy...vc.exe

windows10-2004-x64

3

mineep.dll

windows7-x64

6

mineep.dll

windows10-2004-x64

6

mineepnad.dll

windows7-x64

3

mineepnad.dll

windows10-2004-x64

3

mineepsvc.exe

windows7-x64

3

mineepsvc.exe

windows10-2004-x64

3

minerun.exe

windows7-x64

3

minerun.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc5410eacb8c249799ad3ce5f253f716_JaffaCakes118

  • Size

    777KB

  • MD5

    fc5410eacb8c249799ad3ce5f253f716

  • SHA1

    b6f26f54eb4c0ca531fde646f4bb8445cb459fcc

  • SHA256

    195aacc1ea5b618e3fafd0526e44527eb1d94b6803d539004944b6246fc0de3e

  • SHA512

    b23b14b46f6a6b457015ee5c4f83d264f347e9ab3c27bdd93e73b73676b86b7f69ded1a9262866018b2c1f8a7f903b1b35017237663dbd52c694602eabff4f27

  • SSDEEP

    12288:LjDDPEiTWgQZkIjtSlVq+HPo1L2BRojhXVMrG+To/cFmUZkMjtulVqOYDy+1L2Bh:L/Ds1kUsNA1EujhXDcwcFdkQAPn+1E+C

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • fc5410eacb8c249799ad3ce5f253f716_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Licence_eng.txt
  • $TEMP/~nsis/c3a009/mineepnad.dll
    .dll windows:4 windows x86 arch:x86

    465e0f91d3b58ac7bf6665dfb927d258


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/midiasvc.exe
    .exe windows:4 windows x86 arch:x86

    865a4699dc989a6c4020da5d4bc37278


    Code Sign

    Headers

    Imports

    Sections

  • mine_uins.dat.nsis
  • mineep.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    3349570131fbaa69ef5ccbf0c5cb1ade


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mineepnad.dl_
    .dll windows:4 windows x86 arch:x86

    465e0f91d3b58ac7bf6665dfb927d258


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mineepsvc.ex_
    .exe windows:4 windows x86 arch:x86

    632a36082eb3bccfc57ff488fbb1589c


    Code Sign

    Headers

    Imports

    Sections

  • minerun.ex_
    .exe windows:4 windows x86 arch:x86

    4fd43891ef6b31f90b7c50305f05e318


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe.nsis