Overview

overview

7

Static

static

7

AutoUpdate.exe

windows7-x64

1

AutoUpdate.exe

windows10-2004-x64

1

MultiLayer...er.exe

windows7-x64

1

MultiLayer...er.exe

windows10-2004-x64

1

Qt5PrintSupport.dll

windows7-x64

1

Qt5PrintSupport.dll

windows10-2004-x64

1

Repair.exe

windows7-x64

1

Repair.exe

windows10-2004-x64

1

Unzip.exe

windows7-x64

1

Unzip.exe

windows10-2004-x64

1

WLVideoPlayer.dll

windows7-x64

1

WLVideoPlayer.dll

windows10-2004-x64

1

drive/Screen.exe

windows7-x64

7

drive/Screen.exe

windows10-2004-x64

7

drive/axUdPdf32.msi

windows7-x64

6

drive/axUdPdf32.msi

windows10-2004-x64

6

drive/pointofix.exe

windows7-x64

1

drive/pointofix.exe

windows10-2004-x64

1

drive/setup.exe

windows7-x64

6

drive/setup.exe

windows10-2004-x64

7

paho-mqtt3a.dll

windows7-x64

1

paho-mqtt3a.dll

windows10-2004-x64

1

qntp.dll

windows7-x64

1

qntp.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    03d2d9799561c26271f227999c0c4eba_JaffaCakes118

  • Size

    9.8MB

  • MD5

    03d2d9799561c26271f227999c0c4eba

  • SHA1

    d0c9dbb98c33471557290f04221c07f7e5e03797

  • SHA256

    b1d80e2f7a34adc9d6ed02308e0ecab55cd061eca2124af3c71a3ecc0468981f

  • SHA512

    1343d59199abec61c2e18cd0f84804f33420184294aa9b40b788d356b176843622055f1b6bdd47f8041cb4440aace9d63fcc3956ce806ed36afce1f727c90702

  • SSDEEP

    196608:cd1jAI9BLCOHJG9I7vvWwUJNUp9dXblqqIaBL8u+LrfMArgBJ1PZJpZPy59z:lI3ZHM9PJNUp9dXbYpaBHCTpSvy9z

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 03d2d9799561c26271f227999c0c4eba_JaffaCakes118
    .zip
  • AutoUpdate.exe
    .exe windows:5 windows x86 arch:x86

    db28fc9abb5f611da6a8d834ae73be57


    Headers

    Imports

    Sections

  • MultiLayerPainter/MultiLayerPainter.exe
    .exe windows:4 windows x64 arch:x64

    563eec7a6d2b7e9d4824e4588679c871


    Headers

    Imports

    Exports

    Sections

  • Qt5PrintSupport.dll
    .dll windows:4 windows x86 arch:x86

    78909c293799a7c0e46ab35f63cebf92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Repair.exe
    .exe windows:4 windows x86 arch:x86

    a8a6d495bf2d11df1484f0cd5afb6a4b


    Headers

    Imports

    Exports

    Sections

  • Unzip.exe
    .exe windows:5 windows x86 arch:x86

    886f7f7ec2af03f322fadd8b8a17fd5d


    Headers

    Imports

    Sections

  • WLVideoPlayer.dll
    .dll windows:4 windows x86 arch:x86

    d2893b3f9a2bbc1af544469e06a7a5ea


    Headers

    Imports

    Exports

    Sections

  • drive/Screen.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • drive/axUdPdf32.msi
    .msi
  • drive/pointofix.exe
    .exe windows:5 windows x86 arch:x86

    8219a8cb08867750e1b5271078f530be


    Headers

    Imports

    Exports

    Sections

  • drive/pointofix_translation.ini
  • drive/setup.exe
    .exe windows:5 windows x86 arch:x86

    cfa06eb8ecb157d3e1e5170182639085


    Headers

    Imports

    Exports

    Sections

  • languages/ar.qm
  • languages/da.qm
  • languages/de.qm
  • languages/en.qm
  • languages/es.qm
  • languages/fr.qm
  • languages/gr.qm
  • languages/id.qm
  • languages/in.qm
  • languages/it.qm
  • languages/kr.qm
  • languages/my.qm
  • languages/nl.qm
  • languages/no.qm
  • languages/nz.qm
  • languages/pt.qm
  • languages/ru.qm
  • languages/se.qm
  • languages/tr.qm
  • languages/ua.qm
  • languages/vn.qm
  • languages/zh.qm
  • paho-mqtt3a.dll
    .dll windows:6 windows x86 arch:x86

    b2319048030cdeb767991fe345e49f6e


    Headers

    Imports

    Exports

    Sections

  • qntp.dll
    .dll windows:4 windows x86 arch:x86

    304cae4f5e490f150c5d0d9df1b090fd


    Headers

    Imports

    Exports

    Sections