Overview

overview

7

Static

static

3

3a24f7c090...18.exe

windows7-x64

7

3a24f7c090...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$TEMP/dxwebsetup.exe

windows7-x64

7

$TEMP/dxwebsetup.exe

windows10-2004-x64

7

Ionic.Zip.Reduced.dll

windows7-x64

1

Ionic.Zip.Reduced.dll

windows10-2004-x64

1

OCCT.XmlSe...rs.dll

windows7-x64

1

OCCT.XmlSe...rs.dll

windows10-2004-x64

1

OCCT.exe

windows7-x64

3

OCCT.exe

windows10-2004-x64

3

Plugins/AIDA64.dll

windows7-x64

3

Plugins/AIDA64.dll

windows10-2004-x64

3

Plugins/CoreTemp.dll

windows7-x64

3

Plugins/CoreTemp.dll

windows10-2004-x64

3

Plugins/Everest.dll

windows7-x64

3

Plugins/Everest.dll

windows10-2004-x64

3

Plugins/MBM5.dll

windows7-x64

3

Plugins/MBM5.dll

windows10-2004-x64

3

Plugins/SpeedFan.dll

windows7-x64

3

Plugins/SpeedFan.dll

windows10-2004-x64

3

Plugins/SysTool.dll

windows7-x64

3

Plugins/SysTool.dll

windows10-2004-x64

3

ZedGraph.dll

windows7-x64

3

ZedGraph.dll

windows10-2004-x64

3

occtaux.dll

windows7-x64

3

occtaux.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a24f7c09066562bc9d449436dc62825_JaffaCakes118

  • Size

    6.5MB

  • MD5

    3a24f7c09066562bc9d449436dc62825

  • SHA1

    1166445eae4f0da525a91fb22ff787969cf928f9

  • SHA256

    e3584ce9419db55485b73914ceabb0b21a6f722c6919d0f2efcff4ad9feab783

  • SHA512

    bea9fdc949ed7390b540a93a34aa0209e2de5505f87b168a4bd1fd158f971b19232351d76cd6baca9426b80728f2dd896e99027d39b4e097e07b52df033275d4

  • SSDEEP

    98304:T2ao5T5BS8hVXIvTiDM7PBGjLZNInNy+6PsH9L9DBgHWwOco0IMgadeoNcIOxy6K:T01Y7PBSZWy+xH9BDBcgMg3LdwQyF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 3a24f7c09066562bc9d449436dc62825_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/dxwebsetup.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • GPU3DName.txt
  • GraphTheme.csv
  • Ionic.Zip.Reduced.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • OCCT.XmlSerializers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • OCCT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • OCCT.exe.config
  • Plugins/AIDA64.dll
    .dll windows:5 windows x86 arch:x86

    f6276efcf72960c6ee3038320a71e304


    Headers

    Imports

    Exports

    Sections

  • Plugins/CoreTemp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Everest.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/MBM5.dll
    .dll windows:4 windows x86 arch:x86

    c8b7633166a1ce40de19a8ce3027a9b2


    Headers

    Imports

    Exports

    Sections

  • Plugins/SpeedFan.dll
    .dll windows:4 windows x86 arch:x86

    c8b7633166a1ce40de19a8ce3027a9b2


    Headers

    Imports

    Exports

    Sections

  • Plugins/SysTool.dll
    .dll windows:4 windows x86 arch:x86

    492a0586c03e3e945141c00a2fad6aa8


    Headers

    Imports

    Exports

    Sections

  • ShaderComplexity.csv
  • ZedGraph.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • error.wav
  • locale/BaseForTranslatingOCCT.txt
  • locale/ChineseTraditional.lang
  • locale/francais.lang
  • locale/german.lang
  • locale/japanese.lang
  • locale/polish.lang
  • locale/romana.lang
  • locale/russian.lang
  • locale/spanish.lang
    .xml
  • locale/svenska.lang
  • occtaux.dll
    .dll windows:5 windows x86 arch:x86

    6edf47fb9e3b06eac5c444e0b86202c9


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections