Overview

overview

7

Static

static

3

10924cb71b...18.exe

windows7-x64

3

10924cb71b...18.exe

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$SYSDIR/winkx.dll

windows7-x64

6

$SYSDIR/winkx.dll

windows10-2004-x64

6

$TEMP/Disk...CN.exe

windows7-x64

7

$TEMP/Disk...CN.exe

windows10-2004-x64

6

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

DiskCmd.exe

windows7-x64

3

DiskCmd.exe

windows10-2004-x64

3

DiskFree.exe

windows7-x64

3

DiskFree.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

zh_CN.dll

windows7-x64

1

zh_CN.dll

windows10-2004-x64

1

ieagent.exe

windows7-x64

3

ieagent.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    10924cb71b41a5e823d16f6a7e45c96e_JaffaCakes118

  • Size

    286KB

  • MD5

    10924cb71b41a5e823d16f6a7e45c96e

  • SHA1

    dee78c93d3d2d13177b2b49c52f047b9e24a1738

  • SHA256

    aa390e4a15248202174fbf09f095168bf8a89424994a2f58e1815aec29749b0e

  • SHA512

    b5c0202992b707e63704b3caddf314312b933f4b08140ff6bae07fa707c03c05107dca91763750cd7c77c5c67391ae3055d4116e6090ff2d7526ff40deb9d566

  • SSDEEP

    6144:Q86k0+h7zYklI65lAIFAjj7gOIez4csj5S486BKvZo4:K+JlI65hmc/5jn86B6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs
    installer

Files

  • 10924cb71b41a5e823d16f6a7e45c96e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Locate.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    f835ad7f9363dc017c6826af3baa9002


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/winkx.dll
    .dll windows:4 windows x86 arch:x86

    0fae19776bb7ea9ae150dcd5570937bf


    Headers

    Imports

    Exports

    Sections

  • $TEMP/DiskFree-SetupCN.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • DiskCmd.exe
    .exe windows:4 windows x86 arch:x86

    0ebb9e5f82be03b23ee032f067f3c2e7


    Headers

    Imports

    Sections

  • DiskFree.exe
    .exe windows:4 windows x86 arch:x86

    dc90047bb0269fc1c51d6f0d7fa762d4


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • zh_CN.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ieagent.exe
    .exe windows:4 windows x86 arch:x86

    c01d9b0be1117e69f6b30de76052c0c3


    Headers

    Imports

    Sections