Overview
overview
7Static
static
3029677a4a2...18.exe
windows7-x64
7029677a4a2...18.exe
windows10-2004-x64
7$0/resultbrowser.dll
windows7-x64
1$0/resultbrowser.dll
windows10-2004-x64
1$0/resultbrowser.exe
windows7-x64
1$0/resultbrowser.exe
windows10-2004-x64
3$0/uninstall.exe
windows7-x64
7$0/uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3General
-
Target
029677a4a25f1f4d29223b989d2ac488_JaffaCakes118
-
Size
652KB
-
Sample
240930-whwzxasbmf
-
MD5
029677a4a25f1f4d29223b989d2ac488
-
SHA1
40a0cf5525ec0714870774da57e3a7e434040f87
-
SHA256
b74202b42da26bced2ad73bc73b96faa8da54d1ea2049e4083f54b7b2a3348ca
-
SHA512
06451d4298ffd4e6a5a10c6310fd80c5af11c2430e0b7a0d251b5fb7da90baa32cf6d9b44cbe21574decc8badc2b9cd0fec2585bdcc7d2f3db80d83f695576f0
-
SSDEEP
12288:RfsJqbYp6TkQ3ykusestdhzgC7LP6BUQOVAJDSMEbQ5AFH/l:RE6Yp6TkQ3ykQwfz5LCGI1E4Ald
Static task
static1
Behavioral task
behavioral1
Sample
029677a4a25f1f4d29223b989d2ac488_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
029677a4a25f1f4d29223b989d2ac488_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$0/resultbrowser.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$0/resultbrowser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$0/resultbrowser.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$0/resultbrowser.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$0/uninstall.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$0/uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
029677a4a25f1f4d29223b989d2ac488_JaffaCakes118
-
Size
652KB
-
MD5
029677a4a25f1f4d29223b989d2ac488
-
SHA1
40a0cf5525ec0714870774da57e3a7e434040f87
-
SHA256
b74202b42da26bced2ad73bc73b96faa8da54d1ea2049e4083f54b7b2a3348ca
-
SHA512
06451d4298ffd4e6a5a10c6310fd80c5af11c2430e0b7a0d251b5fb7da90baa32cf6d9b44cbe21574decc8badc2b9cd0fec2585bdcc7d2f3db80d83f695576f0
-
SSDEEP
12288:RfsJqbYp6TkQ3ykusestdhzgC7LP6BUQOVAJDSMEbQ5AFH/l:RE6Yp6TkQ3ykQwfz5LCGI1E4Ald
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$0/resultbrowser.dll
-
Size
560KB
-
MD5
3d420e9b099da001110542c5b2810b89
-
SHA1
73ba5ad9e7a8040f1f42cee1d1ec6049c68451f8
-
SHA256
91e366a11a6960110ec85173808106f7bcd1132ae98639f2ddcb3344ca04b82a
-
SHA512
cd9e5a0503a61feae5e10b30160b592dd6773e7f58b1236a17e4680baf3f4ef31bbbb959f9a0207ec2bbacc51be4968bbc70aa28fef48c60fe2549bf0bd1a27a
-
SSDEEP
12288:Zvb1RlJ+2WsA3jZVilsCrZhR8d2RcAJnI07bgx3JdvPcPxp:lbnlJ+2ojZoSyZ04VJnI0w/h0X
Score1/10 -
-
-
Target
$0/resultbrowser.exe
-
Size
44KB
-
MD5
3b6e1efd41843ab6a5237246494a2fa3
-
SHA1
6c1d8133cc9f5bd33264eea622bcc2c689c0c159
-
SHA256
560c95d0c5550c1000d5b42c3a3062ad15a6caceaa9329e66c4f2dae92af9708
-
SHA512
7c1d28640ed27d7edc7756872022f1fbff137a800755704281cc29655fc890da518c6f242894ba20d4d943bfe42a7cc719ec7de70d531fc434ce2def25d0bdb5
-
SSDEEP
768:CaR3RHNDdwdOmxIf2DkyDIa/2BoecOISfV1l:FRHND8Ommf2DxDIvFcTyl
Score3/10 -
-
-
Target
$0/uninstall.exe
-
Size
83KB
-
MD5
d90e0c54ddcc23cfc75e32579cc56c70
-
SHA1
83909c3ad775bac6210d4431b3f03e9229ca9877
-
SHA256
8274bcdae8b130f8580abeab448d44eff756d0929a5ee3b88ff400db9bb8b806
-
SHA512
548835b3e11e919d2092fef763b093df0cf879a0964eb0a65b98a753971ab708d65c1a48b7129a63a5c8bd15f40c846be01e0b5899bdbf9ebb977056ee797cfa
-
SSDEEP
1536:LEkjY1zy214Qay0DGkJ7qAELVigJlRHcpX/OrwsKD7cis52/Dd0P:4kjAJ4dDGkJ+AI0SR8tMwRcisY/2
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
13KB
-
MD5
d765c492c21689e3d9d61634371fd861
-
SHA1
ac200933671ae52c9d5544d0e2e8e9144d286c83
-
SHA256
551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc
-
SHA512
9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f
-
SSDEEP
192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
fe24766ba314f620d57d0cf7339103c0
-
SHA1
8641545f03f03ff07485d6ec4d7b41cbb898c269
-
SHA256
802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd
-
SHA512
60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3
-
SSDEEP
192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB
Score3/10 -