Overview

overview

7

Static

static

3

fee33a456e...18.exe

windows7-x64

3

fee33a456e...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$WINDIR/loaddll.dll

windows7-x64

3

$WINDIR/loaddll.dll

windows10-2004-x64

3

$WINDIR/loaddll.exe

windows7-x64

1

$WINDIR/loaddll.exe

windows10-2004-x64

3

$WINDIR/sporder.dll

windows7-x64

3

$WINDIR/sporder.dll

windows10-2004-x64

3

$WINDIR/sysninit.dll

windows7-x64

3

$WINDIR/sysninit.dll

windows10-2004-x64

3

$WINDIR/syswvh.dll

windows7-x64

3

$WINDIR/syswvh.dll

windows10-2004-x64

3

$WINDIR/syswvmail.dll

windows7-x64

3

$WINDIR/syswvmail.dll

windows10-2004-x64

3

$WINDIR/syswvnt.dll

windows7-x64

3

$WINDIR/syswvnt.dll

windows10-2004-x64

3

$WINDIR/syswvwin.dll

windows7-x64

6

$WINDIR/syswvwin.dll

windows10-2004-x64

6

Trop.url

windows7-x64

6

Trop.url

windows10-2004-x64

3

un.exe

windows7-x64

7

un.exe

windows10-2004-x64

7

wv.exe

windows7-x64

6

wv.exe

windows10-2004-x64

6

wvh.dll

windows7-x64

1

wvh.dll

windows10-2004-x64

1

wvres.dll

windows7-x64

1

wvres.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fee33a456e0d5973fcaa8e61a0d50b05_JaffaCakes118

  • Size

    798KB

  • MD5

    fee33a456e0d5973fcaa8e61a0d50b05

  • SHA1

    82c91432ff35779d25aec6893b3c3765a4c26b8d

  • SHA256

    99bd959f674c68b3c6bd740abd8a1b2956dc315d54e488656bed889d8ab7776f

  • SHA512

    e5ba7c369d8eaed19d8716d9a0a9dda93689cf093dbff5d64ed6fe3393111ba51d57db7044a504a91e75e97027f00aa708cece1245b50f5933a0cd67ccdde384

  • SSDEEP

    12288:ZFMcYYLdf8HGv2quf64h6DmKnHXf6Ksv1DQ+24nwL7gP4Sv8jdKqi50gYjXXUmCL:Z/YE50Gv2VC2CfEa+2RvSvgKqiaX5Er

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • fee33a456e0d5973fcaa8e61a0d50b05_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/HiddenInst.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/W-Splash.ini
  • $PLUGINSDIR/inst-type.ini
  • $TEMP/splashscreen.bmp
  • $WINDIR/loaddll.dll
    .dll windows:4 windows x86 arch:x86

    6a69f0d03b1d588e240c6162a4927399


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/loaddll.exe
    .exe windows:4 windows x86 arch:x86

    70db51f21d271554a1324c4ba12d6efa


    Headers

    Imports

    Sections

  • $WINDIR/sporder.dll
    .dll windows:4 windows x86 arch:x86

    fdff396dc61c37367ae446577e1de173


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/sysninit.dll
    .dll windows:4 windows x86 arch:x86

    65804c8bc8b05f3f82cc22225f2b2178


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/syswvh.dll
    .dll windows:4 windows x86 arch:x86

    f096b4a27d02ba4f55ddad5b3d868895


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/syswvmail.dll
    .dll windows:4 windows x86 arch:x86

    11ff366bbc75fe634c3d2b694ef9603e


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/syswvnt.dll
    .dll windows:4 windows x86 arch:x86

    fbc591d163191d9461ad391cc9837228


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/syswvwin.dll
    .dll windows:4 windows x86 arch:x86

    686f1f4af30977a5a7223a016a7f16b0


    Headers

    Imports

    Sections

  • FILE_ID.DIZ
  • README.TXT
  • Trop.url
  • un.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • viewer.wv
  • winvestigator.xml
    .xml
  • wv.exe
    .exe windows:4 windows x86 arch:x86

    d2fd437ed89de05a29157becd30ea17d


    Headers

    Imports

    Sections

  • wvh.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wvres.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections