Overview

overview

7

Static

static

3

1187e7d38b...18.exe

windows7-x64

7

1187e7d38b...18.exe

windows10-2004-x64

7

$PLUGINSDI...SC.dll

windows7-x64

3

$PLUGINSDI...SC.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nsURL.dll

windows7-x64

3

$PLUGINSDIR/nsURL.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDIR/utils.dll

windows7-x64

3

$PLUGINSDIR/utils.dll

windows10-2004-x64

3

$_52_/Plug...ct.exe

windows7-x64

1

$_52_/Plug...ct.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1187e7d38be3b05c760b90b622196aab_JaffaCakes118

  • Size

    995KB

  • MD5

    1187e7d38be3b05c760b90b622196aab

  • SHA1

    ec0764d121c8ddf46265e9181756686da9d72121

  • SHA256

    ccb789b8c55f38387cf88bd8ceb7c096d383a9e0f3d121e848525e6bc1b244ee

  • SHA512

    6d9a482a92f8e410308a4fbedb92b0cd4c51ea9dee707e78a672c2ed054d2342be9c521d04c4934bb664ddc91759743517c88eee428a39d6d6b7e9242caff840

  • SSDEEP

    24576:XsSB4l2wbdmFHmJaTezBMOQtBosaPJZEziSBzl2wbA:8s4lJbdQpTmxQtTaPJZEGszlJbA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 1187e7d38be3b05c760b90b622196aab_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SimpleSC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsURL.dll
    .dll windows:6 windows x86 arch:x86

    9436459f0afe54c32c76e7444e96bb7f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/utils.dll
    .dll windows:5 windows x86 arch:x86

    d5816f813700b11955631f99212ea4e6


    Headers

    Imports

    Exports

    Sections

  • $_52_/PluginProtect.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections