Overview

overview

7

Static

static

3

0bb10472ed...18.exe

windows7-x64

7

0bb10472ed...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...4_.exe

windows7-x64

7

$SYSDIR/$S...4_.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...8_.dll

windows7-x64

6

$SYSDIR/$S...8_.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    0bb10472ed433ac18d090b9d1f2fa110_JaffaCakes118

  • Size

    194KB

  • MD5

    0bb10472ed433ac18d090b9d1f2fa110

  • SHA1

    5b186d84cd2363f7bd535634e131605f5caef310

  • SHA256

    f37bb3b19adcc2b7534263263683abe8d5a4e0af221a3703df6b99112c598eb8

  • SHA512

    1040fc3ce0f3b27ce4a45fd535ed3a62ac18c685e91dec3354d96983bdfbaba020c80528d7c6ff881c4b103c7229e530a1eb6f4c751d850a54ee2f2a77231c45

  • SSDEEP

    3072:ilpOI2wmJlF6tSdHjrBi3aTK6Od6rn+xhAbLM78R2jpN/Vfj9iaGtK2:i+Y62IDtoa+6OgrneWbLYbaK2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 0bb10472ed433ac18d090b9d1f2fa110_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_14_.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $SYSDIR/$SYSDIR/$_8_.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    11a3f9f27b226511ac460f18e90e2968


    Headers

    Imports

    Exports

    Sections