General

  • Target

    f7355e219d6d3f39b62c735830e27fb2_JaffaCakes118

  • Size

    7.4MB

  • MD5

    f7355e219d6d3f39b62c735830e27fb2

  • SHA1

    dd7d981834a2fbdac5aa7bbd53e7e1e87dfcff6a

  • SHA256

    d5c74042e5d567d673e6e31bf7763a1ed3c4d8c26c1d05a466b20b533f747cd5

  • SHA512

    9e3d15f369186a16f0b812bbada7dceff31e5658eb0ed482c7a8af834e8ce8385fd4302cf894dc7a233c7dc30dac8df431bd20d8176be92c6e880d5211853ca8

  • SSDEEP

    196608:2whxMgc5wHgf0In9CPbA9xC5inZSoStazvpynAVybRPusX28M3WIZ7XjS:2wjMgcWHgfPbYVtNsO4sX3M3WyjS

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 5 IoCs

    Detects file using ACProtect software.

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • f7355e219d6d3f39b62c735830e27fb2_JaffaCakes118
    .rar
  • Preee-v3.17/COMMANDS.INI
  • Preee-v3.17/Rule-Templates/0day.rt
  • Preee-v3.17/Rule-Templates/anime.rt
  • Preee-v3.17/Rule-Templates/apps.rt
  • Preee-v3.17/Rule-Templates/cinema.rt
  • Preee-v3.17/Rule-Templates/divx-cinema.rt
  • Preee-v3.17/Rule-Templates/divx-doku.rt
  • Preee-v3.17/Rule-Templates/divx-retail.rt
  • Preee-v3.17/Rule-Templates/divx.rt
  • Preee-v3.17/Rule-Templates/dox.rt
  • Preee-v3.17/Rule-Templates/dvd-cover.rt
  • Preee-v3.17/Rule-Templates/dvdr-cinema.rt
  • Preee-v3.17/Rule-Templates/dvdr-retail.rt
  • Preee-v3.17/Rule-Templates/dvdr.rt
  • Preee-v3.17/Rule-Templates/ebook.rt
  • Preee-v3.17/Rule-Templates/gamecube.rt
  • Preee-v3.17/Rule-Templates/games.rt
  • Preee-v3.17/Rule-Templates/gba.rt
  • Preee-v3.17/Rule-Templates/hddvd.rt
  • Preee-v3.17/Rule-Templates/mdvdr.rt
  • Preee-v3.17/Rule-Templates/mp3.rt
  • Preee-v3.17/Rule-Templates/pda.rt
  • Preee-v3.17/Rule-Templates/ps2.rt
  • Preee-v3.17/Rule-Templates/ps3.rt
  • Preee-v3.17/Rule-Templates/psp.rt
  • Preee-v3.17/Rule-Templates/psx.rt
  • Preee-v3.17/Rule-Templates/skip_anime.rt
  • Preee-v3.17/Rule-Templates/skip_bookware.rt
  • Preee-v3.17/Rule-Templates/skip_cinema.rt
  • Preee-v3.17/Rule-Templates/skip_crap_0day.rt
  • Preee-v3.17/Rule-Templates/skip_crap_clone.rt
  • Preee-v3.17/Rule-Templates/skip_docu.rt
  • Preee-v3.17/Rule-Templates/skip_foreign_languages.rt
  • Preee-v3.17/Rule-Templates/skip_foreign_languages_mp3.rt
  • Preee-v3.17/Rule-Templates/skip_internals.rt
  • Preee-v3.17/Rule-Templates/skip_mags_newspapers.rt
  • Preee-v3.17/Rule-Templates/skip_mp3-live.rt
  • Preee-v3.17/Rule-Templates/skip_other_os.rt
  • Preee-v3.17/Rule-Templates/skip_tv-hr.rt
  • Preee-v3.17/Rule-Templates/svcd-cinema.rt
  • Preee-v3.17/Rule-Templates/svcd-retail.rt
  • Preee-v3.17/Rule-Templates/svcd.rt
  • Preee-v3.17/Rule-Templates/tv-rips.rt
  • Preee-v3.17/Rule-Templates/tv.rt
  • Preee-v3.17/Rule-Templates/utils.rt
  • Preee-v3.17/Rule-Templates/vcd-cinema.rt
  • Preee-v3.17/Rule-Templates/vcd-retail.rt
  • Preee-v3.17/Rule-Templates/vcd.rt
  • Preee-v3.17/Rule-Templates/wii.rt
  • Preee-v3.17/Rule-Templates/x264.rt
  • Preee-v3.17/Rule-Templates/xbox.rt
  • Preee-v3.17/Rule-Templates/xbox360.rt
  • Preee-v3.17/Rule-Templates/xxx.rt
  • Preee-v3.17/db/data/mysql/time_zone.MYI
  • Preee-v3.17/db/data/mysql/time_zone.frm
  • Preee-v3.17/db/data/mysql/time_zone_leap_second.MYI
  • Preee-v3.17/db/data/mysql/time_zone_leap_second.frm
  • Preee-v3.17/db/data/mysql/time_zone_name.MYI
  • Preee-v3.17/db/data/mysql/time_zone_name.frm
  • Preee-v3.17/db/data/mysql/time_zone_transition.MYI
  • Preee-v3.17/db/data/mysql/time_zone_transition.frm
  • Preee-v3.17/db/data/mysql/time_zone_transition_type.MYI
  • Preee-v3.17/db/data/mysql/time_zone_transition_type.frm
  • Preee-v3.17/db/share/charsets/Index.xml
    .xml
  • Preee-v3.17/db/share/charsets/README
  • Preee-v3.17/db/share/charsets/armscii8.xml
    .xml
  • Preee-v3.17/db/share/charsets/ascii.xml
    .xml
  • Preee-v3.17/db/share/charsets/cp1250.xml
    .xml
  • Preee-v3.17/db/share/charsets/cp1251.xml
    .xml
  • Preee-v3.17/db/share/charsets/cp1256.xml
    .xml
  • Preee-v3.17/db/share/charsets/cp1257.xml
    .xml
  • Preee-v3.17/db/share/charsets/cp850.xml
    .xml
  • Preee-v3.17/db/share/charsets/cp852.xml
    .xml
  • Preee-v3.17/db/share/charsets/cp866.xml
    .xml
  • Preee-v3.17/db/share/charsets/dec8.xml
    .xml
  • Preee-v3.17/db/share/charsets/geostd8.xml
    .xml
  • Preee-v3.17/db/share/charsets/greek.xml
    .xml
  • Preee-v3.17/db/share/charsets/hebrew.xml
    .xml
  • Preee-v3.17/db/share/charsets/hp8.xml
    .xml
  • Preee-v3.17/db/share/charsets/keybcs2.xml
    .xml
  • Preee-v3.17/db/share/charsets/koi8r.xml
    .xml
  • Preee-v3.17/db/share/charsets/koi8u.xml
    .xml
  • Preee-v3.17/db/share/charsets/languages.html
    .sh linux
  • Preee-v3.17/db/share/charsets/latin1.xml
    .xml
  • Preee-v3.17/db/share/charsets/latin2.xml
    .xml
  • Preee-v3.17/db/share/charsets/latin5.xml
    .xml
  • Preee-v3.17/db/share/charsets/latin7.xml
    .xml
  • Preee-v3.17/db/share/charsets/macce.xml
    .xml
  • Preee-v3.17/db/share/charsets/macroman.xml
    .xml
  • Preee-v3.17/db/share/charsets/swe7.xml
    .xml
  • Preee-v3.17/db/share/english/errmsg.sys
  • Preee-v3.17/db/sql_data/add_release.sql
  • Preee-v3.17/db/sql_data/add_user.sql
  • Preee-v3.17/db/sql_data/change_allow.sql
  • Preee-v3.17/db/sql_data/change_host.sql
  • Preee-v3.17/db/sql_data/change_password.sql
  • Preee-v3.17/db/sql_data/create_db.sql
  • Preee-v3.17/db/sql_data/del_release.sql
  • Preee-v3.17/db/sql_data/del_user.sql
  • Preee-v3.17/db/sql_data/get_all_releases.sql
  • Preee-v3.17/db/sql_data/get_release.sql
  • Preee-v3.17/db/sql_data/get_release_count.sql
  • Preee-v3.17/db/sql_data/get_release_exact.sql
  • Preee-v3.17/db/sql_data/get_releases_for_list.sql
  • Preee-v3.17/db/sql_data/get_sections_for_group.sql
  • Preee-v3.17/db/sql_data/get_users.sql
  • Preee-v3.17/db/sql_data/update_release.sql
  • Preee-v3.17/db/sql_script/add_release.sql
  • Preee-v3.17/db/sql_script/check_db.sql
  • Preee-v3.17/db/sql_script/fix_sections.sql
  • Preee-v3.17/db/sql_script/get_sections_for_group.sql
  • Preee-v3.17/db/sql_script/repair_db.sql
  • Preee-v3.17/db/sql_script/show_last_100_releases.sql
  • Preee-v3.17/db/sql_script/show_this_month_releases.sql
  • Preee-v3.17/db/sql_script/show_todays_releases.sql
  • Preee-v3.17/docs/change.log
  • Preee-v3.17/docs/old_german_tutorial.txt
  • Preee-v3.17/docs/old_quick_setup.txt
  • Preee-v3.17/docs/old_quickstart_autotrade.txt
  • Preee-v3.17/docs/readme.txt
  • Preee-v3.17/docs/sample_plugin_source.zip
    .zip
  • ConfigForm.dfm
  • ConfigForm.pas
  • sample_plugin.dpr
  • Preee-v3.17/docs/script.txt
    .js
  • Preee-v3.17/dupeengines/nforce.nl.conf
  • Preee-v3.17/icons/0day.bmp
  • Preee-v3.17/icons/DS.bmp
  • Preee-v3.17/icons/Wii.bmp
  • Preee-v3.17/icons/anime.bmp
  • Preee-v3.17/icons/apps.bmp
  • Preee-v3.17/icons/divx.bmp
  • Preee-v3.17/icons/dox.bmp
  • Preee-v3.17/icons/dreamcast.bmp
  • Preee-v3.17/icons/dvd-r.bmp
  • Preee-v3.17/icons/dvd.bmp
  • Preee-v3.17/icons/dvdr.bmp
  • Preee-v3.17/icons/ebook.bmp
  • Preee-v3.17/icons/gamecube.bmp
  • Preee-v3.17/icons/games.bmp
  • Preee-v3.17/icons/gba.bmp
  • Preee-v3.17/icons/mp3.bmp
  • Preee-v3.17/icons/mv.bmp
  • Preee-v3.17/icons/n64.bmp
  • Preee-v3.17/icons/nuke.bmp
  • Preee-v3.17/icons/pda.bmp
  • Preee-v3.17/icons/ps2.bmp
  • Preee-v3.17/icons/ps3.bmp
  • Preee-v3.17/icons/psp.bmp
  • Preee-v3.17/icons/svcd.bmp
  • Preee-v3.17/icons/tv-rips.bmp
  • Preee-v3.17/icons/tv.bmp
  • Preee-v3.17/icons/utils.bmp
  • Preee-v3.17/icons/vcd.bmp
  • Preee-v3.17/icons/x264.bmp
  • Preee-v3.17/icons/xbox.bmp
  • Preee-v3.17/icons/xbox2.bmp
  • Preee-v3.17/icons/xbox360.bmp
  • Preee-v3.17/icons/xvid.bmp
  • Preee-v3.17/icons/xxx.bmp
  • Preee-v3.17/libeay32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Preee-v3.17/libmySQL.dll
    .dll windows:4 windows x86 arch:x86

    ca97046fc59aeff7c4c6936cb600d9d4


    Headers

    Imports

    Exports

    Sections

  • Preee-v3.17/libmysqld.dl_
    .dll windows:4 windows x86 arch:x86

    8186630641a18456430c25e9527723a5


    Headers

    Imports

    Exports

    Sections

  • Preee-v3.17/libmysqld50.dll
    .dll windows:4 windows x86 arch:x86

    d05a68888b09c1b3d7e73c7fa5ea8bca


    Headers

    Imports

    Exports

    Sections

  • Preee-v3.17/libssl32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Preee-v3.17/lucansi.ttf
  • Preee-v3.17/nfokeywords.dat
  • Preee-v3.17/plugins/config_files/demo-csfx.conf
  • Preee-v3.17/plugins/config_files/demo-flipcode.conf
  • Preee-v3.17/plugins/config_files/demo-gamedev.conf
  • Preee-v3.17/plugins/config_files/demo-lnxscene.conf
  • Preee-v3.17/plugins/config_files/demo-noerror.conf
  • Preee-v3.17/plugins/config_files/demo-ojuice.conf
  • Preee-v3.17/plugins/config_files/demo-scene.conf
  • Preee-v3.17/plugins/config_files/demo-scenespot.conf
  • Preee-v3.17/plugins/config_files/demo-slengpung.conf
  • Preee-v3.17/plugins/config_files/demo-vorc.conf
  • Preee-v3.17/plugins/mirc_extract.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Preee-v3.17/plugins/news.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Preee-v3.17/plugins/rssfeed.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Preee-v3.17/plugins/rssfeed.ini
  • Preee-v3.17/plugins/update_checker.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Preee-v3.17/plugins/web_parser.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Preee-v3.17/pree.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Preee-v3.17/quitmsg.dat
  • Preee-v3.17/rlsstopwords.dat
  • Preee-v3.17/rlstypes.dat
  • Preee-v3.17/scrapers/Excalibur.xml
  • Preee-v3.17/scrapers/KinoPoisk.xml
    .xml
  • Preee-v3.17/scrapers/adultcdmovies.xml
  • Preee-v3.17/scrapers/adultfilmdatabase.xml
  • Preee-v3.17/scrapers/allmusic.xml
    .xml
  • Preee-v3.17/scrapers/allocine.xml
    .xml
  • Preee-v3.17/scrapers/asiandb.xml
  • Preee-v3.17/scrapers/culturalia.xml
  • Preee-v3.17/scrapers/filmaffinity.xml
    .xml
  • Preee-v3.17/scrapers/filmstarts.xml
  • Preee-v3.17/scrapers/filmup.xml
  • Preee-v3.17/scrapers/filmweb.xml
    .xml
  • Preee-v3.17/scrapers/imdb tv.xml
    .xml
  • Preee-v3.17/scrapers/imdb.xml
    .xml
  • Preee-v3.17/scrapers/jadedVideo.xml
  • Preee-v3.17/scrapers/movie-xml.xml
  • Preee-v3.17/scrapers/moviemaze.xml
    .xml
  • Preee-v3.17/scrapers/mtv.xml
    .xml
  • Preee-v3.17/scrapers/musicvideos.xml
  • Preee-v3.17/scrapers/ofdb.xml
    .xml
  • Preee-v3.17/scrapers/tvcom.xml
    .xml
  • Preee-v3.17/scrapers/tvdb-fr.xml
  • Preee-v3.17/scrapers/tvdb.xml
    .xml
  • Preee-v3.17/scrapers/tvrage.xml
  • Preee-v3.17/scripts/backfill.scr
    .js
  • Preee-v3.17/scripts/backfill_trade.scr
    .js
  • Preee-v3.17/scripts/filldupedb.scr
    .js
  • Preee-v3.17/skins/Crystal Clear-CRCL1S.skn
  • Preee-v3.17/skins/VistaXP-VISTAXPS2.skn
  • Preee-v3.17/skins/mxskin22.skn
  • Preee-v3.17/skins/mxskin42.skn
  • Preee-v3.17/tor-resolve.exe
    .exe windows:4 windows x86 arch:x86

    61621860973b88f109ecef5d2db47847


    Headers

    Imports

    Sections

  • Preee-v3.17/tor.exe
    .exe windows:4 windows x86 arch:x86

    de85de088e75ccc3730fcf1cdd0677ab


    Headers

    Imports

    Sections

  • Preee-v3.17/web/command.htm
    .html
  • Preee-v3.17/web/index.htm
    .html
  • Preee-v3.17/web/logo.jpg
    .jpg
  • Preee-v3.17/web/pwform.htm
    .html
  • Preee-v3.17/web/releases.htm
    .html
  • Preee-v3.17/web/sm_logo.jpg
    .jpg
  • Preee-v3.17/新云软件.url
    .url