Overview

overview

7

Static

static

3

806deeb0f6...18.exe

windows7-x64

7

806deeb0f6...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI..._n.dll

windows7-x64

3

$PLUGINSDI..._n.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nxs.dll

windows7-x64

3

$PLUGINSDIR/nxs.dll

windows10-2004-x64

3

$TEMP/$_73_/ext.exe

windows7-x64

3

$TEMP/$_73_/ext.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    806deeb0f6b8fdbc740542a30757af44_JaffaCakes118

  • Size

    577KB

  • MD5

    806deeb0f6b8fdbc740542a30757af44

  • SHA1

    848a71bf057d9ec509a40c38ac48757b500fc44c

  • SHA256

    faaf60e0733dd6c68716d0f15081ac2b92573ef5a4a750233dfb43e3b7a4dd31

  • SHA512

    2f1fc3112cdca6df6d40d439ed2ee8918dc2c3e30faf7e5ee4ee0d7e32b2c3d0b97364085da8a3d8044fbaf90fcff46050881e7ae71bd29b9d877c848c861db2

  • SSDEEP

    12288:Dxjbz5FzCXB0mFcmgp6SXrdhJrJtCyZPBL9hGPfCz:DxjbVUKmFbrSZv95PBL9wKz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 806deeb0f6b8fdbc740542a30757af44_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:5 windows x86 arch:x86

    17ea51acf0005f354251d1882460a13c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISArray.dll
    .dll windows:4 windows x86 arch:x86

    91596216b99c852af6e0fb1fe8192de4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISpcre.dll
    .dll windows:4 windows x86 arch:x86

    3efd46aba10b2e88f0bd15c6467e81ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc_n.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nxs.dll
    .dll windows:4 windows x86 arch:x86

    fd495db6c916b55c715b6e970a4627e1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_73_/$_73_.zip
    .zip
  • $TEMP/$_73_/ext.doc
    .exe windows:4 windows x86 arch:x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections