Overview

overview

7

Static

static

3

295db6fbaa...18.exe

windows7-x64

7

295db6fbaa...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$TEMP/~nsi...42.dll

windows7-x64

3

$TEMP/~nsi...42.dll

windows10-2004-x64

3

Cloud-Web_2_42.dll

windows7-x64

6

Cloud-Web_2_42.dll

windows10-2004-x64

6

Cloud-Web_...42.dll

windows7-x64

3

Cloud-Web_...42.dll

windows10-2004-x64

3

Cloud-Web_run.exe

windows7-x64

3

Cloud-Web_run.exe

windows10-2004-x64

3

Cloud-Web_...42.exe

windows7-x64

3

Cloud-Web_...42.exe

windows10-2004-x64

3

Cloud-Web_tb_2_42.dll

windows7-x64

3

Cloud-Web_tb_2_42.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    295db6fbaa11d59e669722bd6756ad4f_JaffaCakes118

  • Size

    630KB

  • MD5

    295db6fbaa11d59e669722bd6756ad4f

  • SHA1

    6184ebf9c1dc3cd0d6c46af3ef6b9463bbec7fe2

  • SHA256

    731438912ff3bcb1b4ca522553a66fb7efa901d20c6b106e5ebd342232503b10

  • SHA512

    19610584ebdc545e7b07aa17e602216ec902a067bddc78716b92781dfbccc0f83882402885fe58f3c5b2eee3236276eced58914d2c5fa56902a77a129be308b3

  • SSDEEP

    12288:3QV/5Psrcyf2pG2qxAWvaZlX6plJr8+c0HSGd7X6xqJtcyf2DG2qxAnp7X6Z:32/50rffmsnvaqh8+c0yGdb6xqJtffOm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 295db6fbaa11d59e669722bd6756ad4f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMP/~nsis/Cloud-Web_nad_2_42.dll
    .dll windows:4 windows x86 arch:x86

    caeaf54bd0eeb26b6c0708756c584f46


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_2_42.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    3349570131fbaa69ef5ccbf0c5cb1ade


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_nad_2_42.dl_
    .dll windows:4 windows x86 arch:x86

    caeaf54bd0eeb26b6c0708756c584f46


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cloud-Web_run.ex_
    .exe windows:4 windows x86 arch:x86

    4fd43891ef6b31f90b7c50305f05e318


    Code Sign

    Headers

    Imports

    Sections

  • Cloud-Web_svc_2_42.ex_
    .exe windows:4 windows x86 arch:x86

    79e7f71e7986dc215e54fa43eddefde1


    Code Sign

    Headers

    Imports

    Sections

  • Cloud-Web_tb_2_42.dl_
    .dll regsvr32 windows:4 windows x86 arch:x86

    62aae4a780185490b96a2db14f7f901b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cloud_uins.dat.nsis
  • uninst.exe.nsis