Overview

overview

7

Static

static

3

576a33ad05...18.exe

windows7-x64

7

576a33ad05...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...4_.exe

windows7-x64

7

$SYSDIR/$S...4_.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...9_.dll

windows7-x64

6

$SYSDIR/$S...9_.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    576a33ad050f7e413689438334e7dc79_JaffaCakes118

  • Size

    159KB

  • MD5

    576a33ad050f7e413689438334e7dc79

  • SHA1

    4893338bf7130c132a4e9d4946eea81aede51bac

  • SHA256

    e1fc5043e2a7cd4dda3959523e790991ece97ec0418337bfa39ebc4c972489f8

  • SHA512

    c3e2ec0e14ec56592d29f9aa2acf880773a52b284948684c7bdfcb4aa22919d99a4647934b53809c3d4d5a8f194e536a095ac7483f3f7c4641bb6fa836fad037

  • SSDEEP

    3072:Qd/vyWmJJS/0kUtBB183FZDrTHcC8DkQB0OuWNH/V5RJZ97uF0i8k2OvN:QXH/+qncC8vB0OuWNH/jHP7InaI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 576a33ad050f7e413689438334e7dc79_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_14_.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $SYSDIR/$SYSDIR/$_9_
    .dll regsvr32 windows:5 windows x86 arch:x86

    0df0b6e1af330aad32cc1981001791f6


    Headers

    Imports

    Exports

    Sections