Overview

overview

7

Static

static

7

05ec76c031...18.exe

windows7-x64

3

05ec76c031...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

CnCalendar.dll

windows7-x64

3

CnCalendar.dll

windows10-2004-x64

3

Memo.exe

windows7-x64

6

Memo.exe

windows10-2004-x64

6

SqliteDB.dll

windows7-x64

3

SqliteDB.dll

windows10-2004-x64

3

eAPI.dll

windows7-x64

3

eAPI.dll

windows10-2004-x64

3

eGrid.dll

windows7-x64

3

eGrid.dll

windows10-2004-x64

3

iext.dll

windows7-x64

3

iext.dll

windows10-2004-x64

3

iext5.dll

windows7-x64

3

iext5.dll

windows10-2004-x64

3

krnln.dll

windows7-x64

3

krnln.dll

windows10-2004-x64

3

shell.dll

windows7-x64

3

shell.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05ec76c0318e9f49e74ff3e3accb76bb_JaffaCakes118

  • Size

    1.7MB

  • MD5

    05ec76c0318e9f49e74ff3e3accb76bb

  • SHA1

    dbd90e04cd2a813c926001403d56ce339c32db0b

  • SHA256

    706b58e93552b34d59506662ee14ad2db86b6fa2ac9fedf0dfdcf235542ef11d

  • SHA512

    75e6ee7873bd2954bed43bd84519b9cff3a717fa0a16fa900fbf0f15d0c3cdcde68a9df0ab16856826ed5b466331df5cbcea713f43fca835b3ccf0a5e560f7c7

  • SSDEEP

    24576:GF2YLFZwWobDVkFfkplftcJPiL5ISQt6HFEBoi0CfQrcjwfV/lRDNq8F8Ymn9Cpi:GFh3yJyf6tcZiCd3NNaV/lRBqZ+iQKz

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 05ec76c0318e9f49e74ff3e3accb76bb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9b89b73a2bd2f3c9338530bbd4a212f0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CnCalendar.fne
    .dll windows:4 windows x86 arch:x86

    106972dc337c9d90430041c768f0a72c


    Headers

    Imports

    Exports

    Sections

  • Memo.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • Memo/Data.SIDB
  • Memo/msg.wav
  • MemoHelp.txt
  • SqliteDB.fne
    .dll windows:4 windows x86 arch:x86

    6dabf828f665df2b3c785ee94b5c7e3c


    Headers

    Imports

    Exports

    Sections

  • eAPI.fne
    .dll windows:4 windows x86 arch:x86

    d0090138d80c47735b70f81ce3f6c2b7


    Headers

    Imports

    Exports

    Sections

  • eGrid.fne
    .dll windows:4 windows x86 arch:x86

    2a73be17decd68ea6dacd5dc89916027


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    f86e54dbf86fab2a0484cdc838c093a0


    Headers

    Imports

    Exports

    Sections

  • iext5.fne
    .dll windows:4 windows x86 arch:x86

    2cc11dbc00e8912d9e9e4d405d729709


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • shell.fne
    .dll windows:4 windows x86 arch:x86

    5c5d113b6e7adb5168ea190de24145c0


    Headers

    Imports

    Exports

    Sections