Overview

overview

6

Static

static

3

183b1cb940...18.exe

windows7-x64

3

183b1cb940...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PROGRAMFI...ck.dll

windows7-x64

6

$PROGRAMFI...ck.dll

windows10-2004-x64

6

$PROGRAMFI...an.dll

windows7-x64

3

$PROGRAMFI...an.dll

windows10-2004-x64

3

$PROGRAMFI...rd.exe

windows7-x64

3

$PROGRAMFI...rd.exe

windows10-2004-x64

3

$PROGRAMFI...up.exe

windows7-x64

3

$PROGRAMFI...up.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    183b1cb9401a24ffa852fc2323726528_JaffaCakes118

  • Size

    476KB

  • MD5

    183b1cb9401a24ffa852fc2323726528

  • SHA1

    4100263236e4460942bba4aa44b34e23c7247fcb

  • SHA256

    88eddad66d8c49e66b3fe2ce233ec6bb931e7efaa5f8c545cd7d88cbd63b9110

  • SHA512

    820cd0c0e27d38c2565da69c129b0a1f68c6faab909d30d92c033732d68bc5a7c3ee44fe7d8a366408fab5b5bc0eb2e43d563f4ab86c20aedf6c995dca8e948b

  • SSDEEP

    12288:mm8L5EpHmmGbXs8CrjGZ/XH+IlJQ0dYliFeFw8RPo6VA:mmamxLMXs8CP6/XH+z05ERPdG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 183b1cb9401a24ffa852fc2323726528_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PROGRAMFILES/winguard/wgblock.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    42f9802abf88d39bd6aa46e39b45ade9


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/winguard/wgclean.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PROGRAMFILES/winguard/winguard.exe
    .exe windows:4 windows x86 arch:x86

    a9b44d71b3a0e01aafd26c8442f2c2cc


    Headers

    Imports

    Sections

  • $PROGRAMFILES/winguard/winguardup.exe
    .exe windows:4 windows x86 arch:x86

    08d7bb9c4cf5d35b73ad372a00816488


    Headers

    Imports

    Sections