Overview

overview

7

Static

static

7

topocr.exe

windows7-x64

7

topocr.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

IM31bmp.dll

windows7-x64

1

IM31bmp.dll

windows10-2004-x64

1

IM31gif.dll

windows7-x64

1

IM31gif.dll

windows10-2004-x64

1

IM31jpg.dll

windows7-x64

1

IM31jpg.dll

windows10-2004-x64

1

IM31tif.dll

windows7-x64

1

IM31tif.dll

windows10-2004-x64

1

IM31xbmp.dll

windows7-x64

1

IM31xbmp.dll

windows10-2004-x64

3

IM31xccc.dll

windows7-x64

1

IM31xccc.dll

windows10-2004-x64

3

IM31xgif.dll

windows7-x64

1

IM31xgif.dll

windows10-2004-x64

3

IM31xjpg.dll

windows7-x64

3

IM31xjpg.dll

windows10-2004-x64

3

PDC32.dll

windows7-x64

1

PDC32.dll

windows10-2004-x64

1

hts9.dll

windows7-x64

1

hts9.dll

windows10-2004-x64

1

imgman32.dll

windows7-x64

1

imgman32.dll

windows10-2004-x64

1

imhost32.dll

windows7-x64

1

imhost32.dll

windows10-2004-x64

1

mb1.exe

windows7-x64

1

mb1.exe

windows10-2004-x64

1

ocr1.dll

windows7-x64

3

ocr1.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f387941f655386384214c82566b7261e_JaffaCakes118

  • Size

    7.4MB

  • MD5

    f387941f655386384214c82566b7261e

  • SHA1

    794e7c4f7f8c63b2dba64df81eef6d3482e2301a

  • SHA256

    81104bcff9236c027dcc4d91b8b0bf2dd1b8c915494b2878e26653a3d6672907

  • SHA512

    42ebc34d2fd66d164ad56cd367b7281fb1c4cc94ffbdd93a373da90355b5aa949b73d3f410004a4845f3da7d9de6017c8231b2cac66d36fe1659cf0b8b202018

  • SSDEEP

    98304:Om6GEOcCBLF9k2Y3ExzkM4fPwndK6KCCWbkcMAQY2b8bVRXr+0dX7JO9fTW4Lgvw:nOdsL3k2Y3azkMAQddAAtaSVUML4urgT

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • f387941f655386384214c82566b7261e_JaffaCakes118
    .rar
  • topocr.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • BACKGROUND1.BMP
  • IM31bmp.dil
    .dll windows:4 windows x86 arch:x86

    3cc74157b8178cf0b688dad72db0d16c


    Headers

    Imports

    Exports

    Sections

  • IM31gif.dil
    .dll windows:4 windows x86 arch:x86

    d1e9e0753132285eeb2f3999d5ea908a


    Headers

    Imports

    Exports

    Sections

  • IM31jpg.dil
    .dll windows:4 windows x86 arch:x86

    f457b7f8732fff1247e8a5110ce325da


    Headers

    Imports

    Exports

    Sections

  • IM31tif.dil
    .dll windows:4 windows x86 arch:x86

    628a3c61106d94305d7d6a63437607e4


    Headers

    Imports

    Exports

    Sections

  • IM31xbmp.del
    .dll windows:4 windows x86 arch:x86

    aada7139397b0e55daf8d2515829b6d9


    Headers

    Imports

    Exports

    Sections

  • IM31xccc.del
    .dll windows:4 windows x86 arch:x86

    003b4886f5f6a9a31e7f8f94849eab24


    Headers

    Imports

    Exports

    Sections

  • IM31xgif.del
    .dll windows:4 windows x86 arch:x86

    c6792ef6896b298792433edc218325f4


    Headers

    Imports

    Exports

    Sections

  • IM31xjpg.del
    .dll windows:4 windows x86 arch:x86

    1e09111dc34549587dfb3b401e15c09f


    Headers

    Imports

    Exports

    Sections

  • PDC32.DLL
    .dll windows:4 windows x86 arch:x86

    b8ee1fd4092f763341c4527b6526cc45


    Headers

    Imports

    Exports

    Sections

  • VICDEMO.CUR
  • hts9.dll
    .dll windows:4 windows x86 arch:x86

    793a92e88aac90649c4844a6f5ea3e25


    Headers

    Imports

    Exports

    Sections

  • imgman32.dll
    .dll windows:4 windows x86 arch:x86

    f99a3b66f06b174fe6b8dabe2b67fedb


    Headers

    Imports

    Exports

    Sections

  • imhost32.dll
    .dll windows:4 windows x86 arch:x86

    c30d363ba32ef5833f80ff36844452c5


    Headers

    Imports

    Exports

    Sections

  • mb1.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ocr1.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ssce5432.dll
    .dll windows:4 windows x86 arch:x86

    5beaf43fd83e14a96d8bccb142e76263


    Headers

    Imports

    Exports

    Sections

  • ssceam2.clx
  • ssceda2.clx
  • sscedu2.clx
  • sscefi2.clx
  • sscefr2.clx
  • sscege2.clx
  • ssceit2.clx
  • sscenb2.clx
  • sscepo2.clx
  • sscesp2.clx
  • sscesw2.clx
  • ter14.dll
    .dll windows:4 windows x86 arch:x86

    2f25183b0fb56e390cecc8b2f732b89c


    Headers

    Imports

    Exports

    Sections

  • topocr.exe
    .exe windows:4 windows x86 arch:x86

    e296cc3cd43a3c22289e236788924cda


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • 新云软件.url
    .url