Overview

overview

3

Static

static

3

3ad7b3ceb8...18.exe

windows7-x64

3

3ad7b3ceb8...18.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

HtmlView.dll

windows7-x64

3

HtmlView.dll

windows10-2004-x64

3

OPenGL.dll

windows7-x64

3

OPenGL.dll

windows10-2004-x64

3

Unins.exe

windows7-x64

3

Unins.exe

windows10-2004-x64

3

com.dll

windows7-x64

3

com.dll

windows10-2004-x64

3

commobj.dll

windows7-x64

3

commobj.dll

windows10-2004-x64

3

dp1.dll

windows7-x64

3

dp1.dll

windows10-2004-x64

3

eAPI.dll

windows7-x64

3

eAPI.dll

windows10-2004-x64

3

eCompress.dll

windows7-x64

3

eCompress.dll

windows10-2004-x64

3

iconv.dll

windows7-x64

3

iconv.dll

windows10-2004-x64

3

iext.dll

windows7-x64

3

iext.dll

windows10-2004-x64

3

iext3.dll

windows7-x64

3

iext3.dll

windows10-2004-x64

3

krnln.dll

windows7-x64

3

krnln.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ad7b3ceb8222f4250969bd48ff50d05_JaffaCakes118

  • Size

    1.9MB

  • MD5

    3ad7b3ceb8222f4250969bd48ff50d05

  • SHA1

    90b37457b66c459e41851251003397ee5a673a90

  • SHA256

    4e8e734bb8648278ec2fea661c9e908bd30ac2ebcf3c2cb06949af4a358160f2

  • SHA512

    f9c73045e72ef9e9469278e9eb3cc3150f2d41e2264b18790ec712c38d8b4b9aebecefb93f9a5e2c34a83938a0ed70dff25528c413cce21f456455b68ef7492b

  • SSDEEP

    49152:QW4ku06qYptCS+82f9zmx7wUjNXU+p2rjRG7dzECh+6:v4ku0lYz+PYwUJUK2rtG7dz66

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 3ad7b3ceb8222f4250969bd48ff50d05_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blk.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/yt.bmp
  • HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    4dd740d34ccc499f7834e48dc7fd30a4


    Headers

    Imports

    Exports

    Sections

  • OPenGL.fne
    .dll windows:4 windows x86 arch:x86

    1e62b7dd6617189a7c3ae3a3e8b49fd0


    Headers

    Imports

    Exports

    Sections

  • Unins.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • blk.bmp
  • com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • commobj.fne
    .dll windows:4 windows x86 arch:x86

    9aaa7f5b67e369f3419d7dc3c98eb615


    Headers

    Imports

    Exports

    Sections

  • config.ini
  • ddico.ico
  • dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • eAPI.fne
    .dll windows:4 windows x86 arch:x86

    f45783432178cbfb9ace2017b14127dd


    Headers

    Imports

    Exports

    Sections

  • eCompress.fne
    .dll windows:4 windows x86 arch:x86

    7117536c77f74711fc29c003e012cf45


    Headers

    Imports

    Exports

    Sections

  • iconv.fne
    .dll windows:4 windows x86 arch:x86

    786b7bd5b5d9aef58b0ae2c290907587


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • iext3.fne
    .dll windows:4 windows x86 arch:x86

    828de777d0d26938b2b88952971795a1


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • yt.bmp