Overview

overview

7

Static

static

3

06376a49a5...18.exe

windows7-x64

7

06376a49a5...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...4_.exe

windows7-x64

7

$SYSDIR/$S...4_.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...9_.dll

windows7-x64

6

$SYSDIR/$S...9_.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    06376a49a5858296c55ef56886589c1b_JaffaCakes118

  • Size

    159KB

  • MD5

    06376a49a5858296c55ef56886589c1b

  • SHA1

    871e159ed9625f5f897e941877406d39f315e65b

  • SHA256

    ded22b7f58de26b29158f68a108dd5c59ff03da342c6627ba517deaea8508b77

  • SHA512

    289d82704b0ee99f8c3765744b5760a6bff35daa0a02195aefa5bfeb9bc902e37b82d1a5bdce559d96ce7c2e6193387532e0a85a5e96e0c82b17164c3e38ccbb

  • SSDEEP

    3072:Qd/vyWmJJijBR/RdC1d+Vr20JVbZHOnuuujGe7h24qprjPB8s:QXb1dRdCGYiV0uuuK6ArjB3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 06376a49a5858296c55ef56886589c1b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_14_.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $SYSDIR/$SYSDIR/$_9_
    .dll regsvr32 windows:5 windows x86 arch:x86

    0df0b6e1af330aad32cc1981001791f6


    Headers

    Imports

    Exports

    Sections