Overview

overview

5

Static

static

5

542cfb84c2...18.exe

windows7-x64

5

542cfb84c2...18.exe

windows10-2004-x64

5

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

Main/IEScan.dll

windows7-x64

3

Main/IEScan.dll

windows10-2004-x64

3

Main/RabbitLobby.exe

windows7-x64

3

Main/RabbitLobby.exe

windows10-2004-x64

3

Main/SoftAngel.dll

windows7-x64

3

Main/SoftAngel.dll

windows10-2004-x64

3

Main/SrClean.dll

windows7-x64

3

Main/SrClean.dll

windows10-2004-x64

3

Main/SrDriver.dll

windows7-x64

3

Main/SrDriver.dll

windows10-2004-x64

3

Main/srapw.dll

windows7-x64

3

Main/srapw.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    542cfb84c2c5cc181b06db5f74008ee2_JaffaCakes118

  • Size

    1.6MB

  • MD5

    542cfb84c2c5cc181b06db5f74008ee2

  • SHA1

    59fded5be32e0b64a42e6069221f234ac45bbc12

  • SHA256

    aa514b692072c41e670e808598abd9ed2d05c74b5069d843917f586f44143f9a

  • SHA512

    532cda26058b65d81f0ad3ad694fcea11b96f2fae45f371c7797533beef945193756cc07d8924ab71d623bcf4cea38505b148979f8945b102b48898876a1da7e

  • SSDEEP

    24576:p/s/FsJcQzPblaGPbo1ChBGBE4Uqp0uzWxj611AZzipxml8tniMT00j0dWgGvLLr:1sGJcQ0GjBGBnRdYZup5i+j0d+TP

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • 542cfb84c2c5cc181b06db5f74008ee2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWebEx.dll
    .dll windows:5 windows x86 arch:x86

    ae32207b6031c02aed9dfbea809c29f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Main/IEScan.dll.tmp
    .dll windows:5 windows x86 arch:x86

    5fe2082d05582a38bd5d985bbcac05fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Main/RabbitLobby.exe.tmp
    .exe windows:5 windows x86 arch:x86

    5e4a31e86ca75e8adcad73ebd8b73e61


    Code Sign

    Headers

    Imports

    Sections

  • Main/SoftAngel.dll.tmp
    .dll windows:5 windows x86 arch:x86

    3bb5edf6af1ac0bb25eecb74f7636d4d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Main/SrClean.dll.tmp
    .dll windows:5 windows x86 arch:x86

    f00709362f540c1b47d9c6291026c62b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Main/SrDriver.dll.tmp
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Main/srapw.dll.tmp
    .dll windows:5 windows x86 arch:x86

    7d0edfcb8277d91526b93b8915036733


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections