General

  • Target

    1c166aabd6a42891d869ee719940971b_JaffaCakes118

  • Size

    3.4MB

  • MD5

    1c166aabd6a42891d869ee719940971b

  • SHA1

    1031fd452dd9f4424d2158ae99a642f822bfd9d4

  • SHA256

    b1dc6675916e44fe182fb9e8c55348af9de723388797ed1ef645210d270d0c84

  • SHA512

    1b9b9bef8cef7d047ccd3603ee68688a02bf7a848ac690dc4514955c62f7175b0c8c068e12ba0f773c46fb36c4b214afe3fc7efd6e0e02bd3b20e264e8075a72

  • SSDEEP

    98304:fKIwjZBy/8rzv/WCXUd1v3Cwk0YxbQ8aEn39gz:fKpjLy/8rzv/W4UHv3Cwk0YhQ83396

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c166aabd6a42891d869ee719940971b_JaffaCakes118
    .rar
  • UDOBot/UDOBot.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • UDOBot/maps/-1.bmp
  • UDOBot/maps/0.bmp
  • UDOBot/maps/1.bmp
  • UDOBot/maps/10.bmp
  • UDOBot/maps/11.bmp
  • UDOBot/maps/12.bmp
  • UDOBot/maps/13.bmp
  • UDOBot/maps/14.bmp
  • UDOBot/maps/15.bmp
  • UDOBot/maps/16.bmp
  • UDOBot/maps/17.bmp
  • UDOBot/maps/18.bmp
  • UDOBot/maps/19.bmp
  • UDOBot/maps/2.bmp
  • UDOBot/maps/20.bmp
  • UDOBot/maps/21.bmp
  • UDOBot/maps/22.bmp
  • UDOBot/maps/23.bmp
  • UDOBot/maps/24.bmp
  • UDOBot/maps/25.bmp
  • UDOBot/maps/26.bmp
  • UDOBot/maps/27.bmp
  • UDOBot/maps/28.bmp
  • UDOBot/maps/29.bmp
  • UDOBot/maps/3.bmp
  • UDOBot/maps/4.bmp
  • UDOBot/maps/5.bmp
  • UDOBot/maps/6.bmp
  • UDOBot/maps/7.bmp
  • UDOBot/maps/8.bmp
  • UDOBot/maps/9.bmp
  • UDOBot/maps/Thumbs.db
  • UDOBot/msvcp100d.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • UDOBot/msvcr100d.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • UDOBot/settings.ini