Overview

overview

10

Static

static

3

0fc959b5cc...18.exe

windows7-x64

10

0fc959b5cc...18.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$TEMP/Qagabogul.dll

windows7-x64

3

$TEMP/Qagabogul.dll

windows10-2004-x64

3

$TEMP/Vahoramuz.dll

windows7-x64

3

$TEMP/Vahoramuz.dll

windows10-2004-x64

3

$TEMP/dajupoxe.dll

windows7-x64

3

$TEMP/dajupoxe.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fc959b5ccce513632cad7eca8d6eb7b_JaffaCakes118

  • Size

    460KB

  • MD5

    0fc959b5ccce513632cad7eca8d6eb7b

  • SHA1

    26820bc592b77b88adb4570704c0185b0e47b8cf

  • SHA256

    def8854b873e942671031b0f573893d038b1edf9f7231f91928c7c35d361700b

  • SHA512

    3d98e89a56f9531e1d0f3effee9eb67436dd88b60ade242ecde45243ec1ca0230978e9334c38f390129da92de31da67ad5714b39a7b07f821cc1df69b0d62497

  • SSDEEP

    12288:G/+IvyoFjkBCaHdzRcQlFVrPyvpMVGBhUlLwvh1:G/+Iv5a9zRcC9yEGBRz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 0fc959b5ccce513632cad7eca8d6eb7b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Qagabogul.dll
    .dll windows:4 windows x86 arch:x86

    415dedf787ad1edc4d4891685375c9d5


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Vahoramuz.dll
    .dll windows:4 windows x86 arch:x86

    e07e00e45407ff0dd6abc9eaa981fa7b


    Headers

    Imports

    Exports

    Sections

  • $TEMP/cisuqo.adu
  • $TEMP/dajupoxe.dll
    .dll windows:4 windows x86 arch:x86

    2180f92ab2a245d8e934ba0e2547b006


    Headers

    Imports

    Exports

    Sections