Overview

overview

7

Static

static

3

0cf65089f6...18.exe

windows7-x64

7

0cf65089f6...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

DBGOToolbar.dll

windows7-x64

6

DBGOToolbar.dll

windows10-2004-x64

6

DBGOToolbarT.exe

windows7-x64

3

DBGOToolbarT.exe

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0cf65089f68dd2638864164b22122b6f_JaffaCakes118

  • Size

    258KB

  • MD5

    0cf65089f68dd2638864164b22122b6f

  • SHA1

    7afc6ce1189c83686b85b504500c877d2c118617

  • SHA256

    7f7e80eeb679291c2c2585a686e447be70a9de671f56375b318ed5a788f0bf34

  • SHA512

    804f503acb337a0669b85616b54a6b14a9ebddcd145cafdcf0593769f14957913d5a5d5396de6bb0c3b0321b2c48b3a0251d55b9e2ed8c1aefce19ab6d546b81

  • SSDEEP

    6144:me34ivOrq2Lh+VIzHt8cZRzupL5EUXZgrOsqYLv5OM7LCnUXWLgJC/:3Grq2Lh+Vkt8Wg5EUJsOMP3I/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 0cf65089f68dd2638864164b22122b6f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetHoldData.dll
    .dll windows:4 windows x86 arch:x86

    fac65ab409ffe9f980eec807ae412dc2


    Headers

    Imports

    Exports

    Sections

  • DBGOToolbar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    740dcd07b070c7da81d2089caa8986ed


    Headers

    Imports

    Exports

    Sections

  • DBGOToolbarT.exe
    .exe windows:4 windows x86 arch:x86

    6411002333b16a1c65ff44855552ad52


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    d01bef609870d68108539ca1b2908320


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    602d7a78172a6f5b4541df0fb5a6b875


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/chkver.dll
    .dll windows:4 windows x86 arch:x86

    75b55a9958c0e71b0318566f5a517b28


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp