Overview

overview

7

Static

static

3

msnpwd_setup_en.exe

windows7-x64

7

msnpwd_setup_en.exe

windows10-2004-x64

7

$_14326_/$...st.exe

windows7-x64

3

$_14326_/$...st.exe

windows10-2004-x64

3

$_14326_/M...rd.exe

windows7-x64

6

$_14326_/M...rd.exe

windows10-2004-x64

7

$_14326_/msnhook.dll

windows7-x64

3

$_14326_/msnhook.dll

windows10-2004-x64

3

$_14326_/msnhook.exe

windows7-x64

6

$_14326_/msnhook.exe

windows10-2004-x64

6

$_14332_/I...ns.dll

windows7-x64

3

$_14332_/I...ns.dll

windows10-2004-x64

3

$_14332_/LangDLL.dll

windows7-x64

3

$_14332_/LangDLL.dll

windows10-2004-x64

3

$_14332_/S...nu.dll

windows7-x64

3

$_14332_/S...nu.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    17ddec463af47fdaa93747ea8d678730_JaffaCakes118

  • Size

    141KB

  • MD5

    17ddec463af47fdaa93747ea8d678730

  • SHA1

    247b61c246fb163055966c2f7ac1b47f4085fd46

  • SHA256

    24107c18d9e7e95c99cb4c1848d6ab9a791bc7b34fbc4cbbd9767911e0631e38

  • SHA512

    6b64e2af891623d22fd6d26d7b0be1b1fb5b644c3fcacea92aa325e461facd301b6f3108f2226e29b8a859d7003ac8687d77a08feed162e3d75ec52422029682

  • SSDEEP

    3072:YoFr+xRFikAE4rEUlj9X3o65YZODIFBPRXejIZr/fT:YUr+xRYkAECEUltY6uZODSBPRXVZr/fT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 17ddec463af47fdaa93747ea8d678730_JaffaCakes118
    .rar
  • msnpwd_setup_en.exe
    .exe windows:4 windows x86 arch:x86

    1ac3e2ca29bc84ed42cb8b3ed3ca59f7


    Headers

    Imports

    Sections

  • $_14326_/$_14326_/uninst.exe
    .exe windows:4 windows x86 arch:x86

    1ac3e2ca29bc84ed42cb8b3ed3ca59f7


    Headers

    Imports

    Sections

  • $_14326_/MSNRecord.exe
    .exe windows:4 windows x86 arch:x86

    82e5b18cf8be848538bb05ab4b806f75


    Headers

    Imports

    Sections

  • $_14326_/msnhook.dll
    .dll windows:4 windows x86 arch:x86

    1d0be7071424d48afd7f45356abc830a


    Headers

    Imports

    Exports

    Sections

  • $_14326_/msnhook.exe
    .exe windows:4 windows x86 arch:x86

    7e81f1eb1e61113e96040d3a5f91a1d7


    Headers

    Imports

    Sections

  • $_14332_/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    ebfc0bc7d226ec6fb5ab7d8c8c18d0d6


    Headers

    Imports

    Exports

    Sections

  • $_14332_/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    1e399d86888d10912a9ca197fc02abd8


    Headers

    Imports

    Exports

    Sections

  • $_14332_/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    fc81e27ab736925b73283f00b2e36d03


    Headers

    Imports

    Exports

    Sections

  • $_14332_/ioSpecial.ini
  • $_14332_/modern-header.bmp
  • $_14332_/modern-wizard.bmp
  • readme.txt