Overview

overview

7

Static

static

3

2cbd79865f...18.exe

windows7-x64

7

2cbd79865f...18.exe

windows10-2004-x64

7

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...lr.exe

windows7-x64

7

$PLUGINSDI...lr.exe

windows10-2004-x64

7

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...eb.dll

windows7-x64

3

$PLUGINSDI...eb.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cbd79865fb1191313eaab8090ef18b9_JaffaCakes118

  • Size

    336KB

  • MD5

    2cbd79865fb1191313eaab8090ef18b9

  • SHA1

    9bb9b4056e15b5d1094a3f18fe53b7d3858263b8

  • SHA256

    d8a31d0c85fd47d783eac201d4c339c698badcf3d0ded051ff3b0af6d494d31e

  • SHA512

    9f785bac5edbb3beef19cf410c756046615c9e8f24fa8324c26ff2c706b65308895da4e61c641a5522dda76ab1ddc815308d895967f552f7deae742b8c730df4

  • SSDEEP

    6144:ke34WmM+0r7pJ59EuWn9v5EZoQpkZW5S/VSMfQL1Zyt5q2pd5A8WwS:lmor7pB02oQp8WojQ3ybJd5A8C

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs
    installer

Files

  • 2cbd79865fb1191313eaab8090ef18b9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/header.bmp
  • $PLUGINSDIR/krtctrlr.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/manlib.dll
    .dll windows:4 windows x86 arch:x86

    0cf8afbb6d069ff90746d30f6e78cadf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsManWeb.dll
    .dll windows:4 windows x86 arch:x86

    d61462a9b4b60fe0e474f44b8b87ea01


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/serlib.dll
    .dll windows:4 windows x86 arch:x86

    fb7020d0ba7932a36e8d017cd20fbdb4


    Headers

    Imports

    Exports

    Sections