Overview

overview

7

Static

static

3

10be9866ac...18.exe

windows7-x64

7

10be9866ac...18.exe

windows10-2004-x64

7

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/XML.dll

windows7-x64

3

$PLUGINSDIR/XML.dll

windows10-2004-x64

3

TslMoney.exe

windows7-x64

3

TslMoney.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    10be9866acf02fb9d0d24d98acf186a9_JaffaCakes118

  • Size

    1.1MB

  • MD5

    10be9866acf02fb9d0d24d98acf186a9

  • SHA1

    bc9733787cd718771c4dbae634f84591582a2478

  • SHA256

    b167f0f209bc2b1cde52c7484031346785f315b0d0a606724137fa35fc6759e6

  • SHA512

    6d72ac66cbb66e056633420b901b02f8ecc49f30739b7341f5b34a7f281ac44b703b547e3d4c35be2964844b7efe3ae3a0fd0a73176461b0fff0a3b3055d9248

  • SSDEEP

    24576:T++3vTFKDGnm6j+qmfi6pAWKJMwwLazTmatx0qdNk/OPmk:T++3lj9ziLa3ttVOOP1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 10be9866acf02fb9d0d24d98acf186a9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/XML.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Data/TslMoney.bak
  • Data/TslMoney.mdb
  • TslMoney.exe
    .exe windows:5 windows x86 arch:x86

    d05ec0747569132ecea0e332eedd23c0


    Headers

    Imports

    Sections

  • TslMoney.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp