General

  • Target

    f28464d39bebf4c1c9d8873368e85d77_JaffaCakes118

  • Size

    262KB

  • MD5

    f28464d39bebf4c1c9d8873368e85d77

  • SHA1

    2ceb0897da15157b11162d35c4fcafd8f82831b9

  • SHA256

    4ab66b9c415433ac575a48b2651868438583724d973b11ed4993c2632e397209

  • SHA512

    c8181bd75427e045ebdcbe4914ad3f2f58d5c525c3e61f3e5d0be1f379a870e7acabc59277e4524c7480d1de7b63ce30b9747764efd63aa84e75fbbed0721517

  • SSDEEP

    6144:le346ib75+ZPPfnE2Qyn20UATyniR1E2OGPCXiu75+ZPPfnE2Qyn20U:WibF+ZPPfnEUnPTKiUhGaiuF+ZPPfnEG

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f28464d39bebf4c1c9d8873368e85d77_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    ee75cece63794fa22feebed80a358b16


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • EasyOn.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    699f79c4518c9e55bd0f8a32a044cacc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EasyOn.exe
    .exe windows:4 windows x86 arch:x86

    d52f9d9d194587a482c3976b441ddc5b


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe.nsis