General

  • Target

    ebe755e91a4c57e350063fc765c3d90a_JaffaCakes118

  • Size

    1.4MB

  • MD5

    ebe755e91a4c57e350063fc765c3d90a

  • SHA1

    2374cd03128a32a4fb7555c23ced34a1e01deea5

  • SHA256

    5b88b7445121c2449ce53ae739237225ef4ad00160ad1c82daad09d13fb473f7

  • SHA512

    9383bf37c0706196c1035eacee3e553a69ac22172a0c2aecaeaa5c586acac439d80edf9a19003d04c629d87d1d3024f9a4b2f3412dc4539ef37f3e46b5b8b734

  • SSDEEP

    24576:r65zahMbcFXN2tk7SuZ3Jcne0D5RQ6WrpigNG/85lslICq+ajZ+fHy+Dl:rUk0aOkuuZ3J09u7rpHg/klaceHyal

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • ebe755e91a4c57e350063fc765c3d90a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/01.jpg
    .jpg
  • $PLUGINSDIR/02.jpg
    .jpg
  • $PLUGINSDIR/03.jpg
    .jpg
  • $PLUGINSDIR/IMG.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/Progress.bmp
  • $PLUGINSDIR/ProgressBar.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UIEx.dll
    .dll windows:4 windows x86 arch:x86

    b134f67006924ec3c4955fb7af5ba9db


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WebCtrl.dll
    .dll windows:4 windows x86 arch:x86

    edf01e434638f2238a21d45d26ed9a7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/btn.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/ins.bmp
  • $PLUGINSDIR/install.bmp
  • $PLUGINSDIR/license.bmp
  • $PLUGINSDIR/min.bmp
  • $PLUGINSDIR/next.bmp
  • $PLUGINSDIR/open.bmp
  • $PLUGINSDIR/opt.bmp
  • Data/Def.html
  • Data/EKanR.dat
    .zip
  • SysConfig.xml
    .xml
  • arrow_1.png
    .png
  • arrow_2.png
    .png
  • bg0.jpg
    .jpg
  • bg2.png
    .png
  • bg_2.png
    .png
  • bg_setting.png
    .png
  • bgtab1.png
    .png
  • bgtab2.png
    .png
  • bk.png
    .png
  • border.png
    .png
  • btn_back.png
    .png
  • btn_bug.png
    .png
  • btn_close.png
    .png
  • btn_close1.png
    .png
  • btn_del.png
    .png
  • btn_delete_all.png
    .png
  • btn_feedback.png
    .png
  • btn_hidel.png
    .png
  • btn_hidelist.png
    .png
  • btn_max.png
    .png
  • btn_mini.png
    .png
  • btn_mini1.png
    .png
  • btn_prev.png
    .png
  • btn_refresh.png
    .png
  • btn_restore.png
    .png
  • btn_setting.png
    .png
  • btn_showl.png
    .png
  • btn_showlist.png
    .png
  • btn_stop.png
    .png
  • button.png
    .png
  • checkupdate.xml
    .xml
  • def.jpg
    .jpg
  • feedback.xml
    .xml
  • homewin.xml
    .xml
  • icon.png
    .png
  • info_bg.png
    .png
  • list_item.xml
    .xml
  • loading.gif
    .gif
  • logo.png
    .png
  • mainwin.xml
    .xml
  • menuOn.png
    .png
  • menu_1.png
    .png
  • menu_2.png
    .png
  • menu_3.png
    .png
  • menu_4.png
    .png
  • menu_5.png
    .png
  • menu_bk.png
    .png
  • menuitem.png
    .png
  • morewin.xml
    .xml
  • newswin.xml
    .xml
  • play.png
    .png
  • popmenu.xml
    .xml
  • popwin.xml
    .xml
  • progress_back.png
    .png
  • progress_fore.png
    .png
  • scrollbar.png
    .png
  • sideItemBg.png
    .png
  • split.xml
    .xml
  • sys_check_btn.png
    .png
  • tab.png
    .png
  • tab_122.png
    .png
  • tab_player.png
    .png
  • tab_video.png
    .png
  • toolbar_hover.png
    .png
  • toolbar_pushed.png
    .png
  • update.xml
    .xml
  • user2.ini
  • Data/Err.html
  • Data/def.jpg
    .jpg
  • Data/err.jpg
    .jpg
  • Data/loading.gif
    .gif
  • DuiLib.dll
    .dll windows:5 windows x86 arch:x86

    6162aa1706f24638e5f3774ac76710ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • INISet/DMSet.Xml
  • INISet/OLDSet.Xml
  • PlayerUpdate.exe
    .exe windows:5 windows x86 arch:x86

    12135ce1ae8b2e33d4bd32b2ae142ede


    Code Sign

    Headers

    Imports

    Sections

  • SysConfig.ini
  • Unins.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NotifyIcon.dll
    .dll windows:4 windows x86 arch:x86

    e043e246d8abcbb9de2ad82c6e18cd88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:4 windows x86 arch:x86

    7b20d7ddf67d32ef46980776247198a1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UIEx.dll
    .dll windows:4 windows x86 arch:x86

    b134f67006924ec3c4955fb7af5ba9db


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bindplugin.ini
  • $PLUGINSDIR/btn.bmp
  • $PLUGINSDIR/close.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/min.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/unfin.bmp
  • $PLUGINSDIR/unins.bmp
  • $PLUGINSDIR/unok.bmp
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WJNews.exe
    .exe windows:4 windows x86 arch:x86

    ddb7d757bcafa12bc9416fcb59900f52


    Code Sign

    Headers

    Imports

    Sections

  • WJNewsUninstall.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:4 windows x86 arch:x86

    7b20d7ddf67d32ef46980776247198a1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WujiPlayer.exe
    .exe windows:5 windows x86 arch:x86

    b69d0c12b0fba6cafaf7f95990a11be2


    Code Sign

    Headers

    Imports

    Sections

  • client.ini
  • playlist.xml
    .xml
  • server.ini