General

  • Target

    f4acf96c833e5a525a4b1f81abe2aa34_JaffaCakes118

  • Size

    3.0MB

  • MD5

    f4acf96c833e5a525a4b1f81abe2aa34

  • SHA1

    33c9a8235eb6599ef6e46b9d8f7f74873873473f

  • SHA256

    4982a01f8e007c15e18948f8e96ac4dbc3cb87296a76344a214f9ee58f82af94

  • SHA512

    cefccf03334fa67ee01f2399deaa13d81a20ebd5bf77725a6050147c58c3cc62d99e2a24842b5e2ba0e384e0f7d7a4e85649a45d2da3a6575c165df11e3a2b46

  • SSDEEP

    98304:DczKEbyLC1VHfPg8w9n3/osNSDbQ9bQJIz:Dc9ZPg8wJPoMSDc9bQSz

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • f4acf96c833e5a525a4b1f81abe2aa34_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/mpg4c32.dll
    .dll windows:4 windows x86 arch:x86

    bd468d938b50fe4092fdd838ed005360


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    bf634c8fcfe369e96e3d54d8dfe57275


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/xvidvfw.dll
    .dll windows:4 windows x86 arch:x86

    229bd0a26cef6ce3a637e7a1707d7d55


    Headers

    Imports

    Exports

    Sections

  • $WINDIR/inf/mpg4c32.inf
  • $WINDIR/inf/xvid.inf
  • DTDJ_1.exe
    .exe windows:5 windows x86 arch:x86

    4dbc5d08df28b8f55d5238d42ee67fa8


    Headers

    Imports

    Sections

  • Main_dtdj.ini
  • grecd3d8.dll
    .dll windows:4 windows x86 arch:x86

    0977ffd0af7961325755c8d54c5e9ac2


    Headers

    Imports

    Exports

    Sections

  • grecd3d9.dll
    .dll windows:4 windows x86 arch:x86

    b8e1d689737874b504d5d889fb42b396


    Headers

    Imports

    Exports

    Sections

  • grecddraw.dll
    .dll windows:4 windows x86 arch:x86

    062c578d9ac3adf9b45ce2226cd016a3


    Headers

    Imports

    Exports

    Sections

  • grechook.dll
    .dll windows:4 windows x86 arch:x86

    d2879f7bc39b0151a0eb95cd827aef30


    Headers

    Imports

    Exports

    Sections

  • grecogl.dll
    .dll windows:4 windows x86 arch:x86

    e772ea7ecc53832ee2a4730197b5d1aa


    Headers

    Imports

    Exports

    Sections

  • grecorder.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • lame_enc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • license.txt
  • mpg4c32.dll
    .dll windows:4 windows x86 arch:x86

    bd468d938b50fe4092fdd838ed005360


    Headers

    Imports

    Exports

    Sections

  • mpg4c32.inf
  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • soft2cncom˵.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • wmasf.dll
    .dll windows:5 windows x86 arch:x86

    f5ff989df3991d98134d8365e6abd655


    Headers

    Imports

    Exports

    Sections

  • wmvcore.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    93ffa084929ccbb3d7c99014a7547237


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xvid.inf
  • xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    bf634c8fcfe369e96e3d54d8dfe57275


    Headers

    Imports

    Exports

    Sections

  • xvidvfw.dll
    .dll windows:4 windows x86 arch:x86

    229bd0a26cef6ce3a637e7a1707d7d55


    Headers

    Imports

    Exports

    Sections

  • ˵.txt