Overview

overview

7

Static

static

3

MTAInstall05.exe

windows7-x64

7

MTAInstall05.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

3

$R0.dll

windows10-2004-x64

3

$R5/NSIS.L...ol.exe

windows7-x64

7

$R5/NSIS.L...ol.exe

windows10-2004-x64

7

MTA-0.5-EULA.pdf

windows7-x64

3

MTA-0.5-EULA.pdf

windows10-2004-x64

3

MTA-0.5-Manual.pdf

windows7-x64

3

MTA-0.5-Manual.pdf

windows10-2004-x64

3

MTAClient.exe

windows7-x64

3

MTAClient.exe

windows10-2004-x64

3

MTAPH.exe

windows7-x64

3

MTAPH.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2caa37978fef0c62589ff55d63b702c3_JaffaCakes118

  • Size

    2.9MB

  • MD5

    2caa37978fef0c62589ff55d63b702c3

  • SHA1

    07a35e6b452ed41d11bff54d91534d2b2cf6cbff

  • SHA256

    4efbfa6aaf36f592f3f0dbf80d7256a367ab67c3a38c0477c0fcbacce21f128a

  • SHA512

    61836bb7bcf2ab7774a5b1da6098c405183962c3e924b74da3575c2d48c362bb13189381e7658efee5e7bd509a6b86a8ee978539341e3a13fc4d248697857545

  • SSDEEP

    49152:gufGizUxbiULYepXGK15UsIQ7+l7DgUq+8jm2eP2K6CJAqbfl+8AjU18+hLn1oPc:g+hxULB2A5UbrwUqRXoL6CVbfLH15/oE

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 2caa37978fef0c62589ff55d63b702c3_JaffaCakes118
    .rar
  • MTAInstall05.exe
    .exe windows:4 windows x86 arch:x86

    1433f2e02f7db60c6c8547c52a3f8504


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a75ed4b57a83b633f5cb5d4939d72f27


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • $R5/NSIS.Library.RegTool.exe
    .exe windows:4 windows x86 arch:x86

    adf593074e4f5c597d997c7176d4e1da


    Headers

    Imports

    Sections

  • MTA-0.5-EULA.pdf
    .pdf
  • MTA-0.5-Manual.pdf
    .pdf

    • http://support.mtavc.com/forum/

  • MTAClient.exe
    .exe windows:4 windows x86 arch:x86

    bd51a645a9c68bd03b2e51586e5cbdcb


    Headers

    Imports

    Sections

  • MTAPH.exe
    .exe windows:4 windows x86 arch:x86

    8add783c13982707d2c8bf5add790dea


    Headers

    Imports

    Sections

  • www.gta.pt.to.txt