General

  • Target

    03b89f46854a3db9e1bbf18fd19940f5_JaffaCakes118

  • Size

    1.6MB

  • MD5

    03b89f46854a3db9e1bbf18fd19940f5

  • SHA1

    4d41e966d69f824a2c81ec3e73adb5aeea935f45

  • SHA256

    1117cf57494539dcd0c313f47dd9d6b7bbfcd3656e1a6ea3f326c2cbed333d91

  • SHA512

    8ff14aa6e2129f76ab142db1b4f5c1b3d55e430389b2a26a3ab57fd9f2d75a63a892fd88be4a20e18b430dc8038021b7007120842cb7d0b8f5772e9bec59dcc9

  • SSDEEP

    49152:B4iUJg/bzdpAI7QeZ6688/ykGl4y8u7CUxB:BpUJWbp+IdQ3VPmyrBP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • 03b89f46854a3db9e1bbf18fd19940f5_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Ask_Logo.bmp
  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    149adf074d317fbf0d2f17314bd18969


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ask_eula.rtf
    .rtf
  • $PLUGINSDIR/banner.bmp
  • $PLUGINSDIR/banner_chrome.bmp
  • $PLUGINSDIR/banner_chrome_36.bmp
  • $PLUGINSDIR/banner_ff.bmp
  • $PLUGINSDIR/banner_ie.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisXML.dll
    .dll windows:4 windows x86 arch:x86

    1156b4dd8fa8f1d42696b7a2d5b3e139


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/apphelp.dll
    .dll windows:5 windows x86 arch:x86

    ce8eddc68f0d837dc87c8d153c0249c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/soffer.dll
    .dll windows:5 windows x86 arch:x86

    b2b1b383b1ebe9b74c890536bab03c9a


    Code Sign

    Headers

    Imports

    Exports

    Sections