General

  • Target

    05a4836d3e6e9c98040f457a1d6f78e9_JaffaCakes118

  • Size

    1.6MB

  • MD5

    05a4836d3e6e9c98040f457a1d6f78e9

  • SHA1

    c5fd7fa1aa75140fd3f10f9e1ee79031a1d2ed4d

  • SHA256

    201906c9f68f5ddb973bfb1d0bd499b3d0f8137a0d54e0c994b6d91d7ae391cd

  • SHA512

    fca12e9e1f9030dc32a2bbd1e9333218f75558eef6200a04b204368aecb1581c7903232f1667721ac6069b00def7be25bfdab2cbc32a93e9c5ce3a59e122da0b

  • SSDEEP

    24576:D6C4SAmwW9AFXPYMq/m+VO2kQEFAtURxnSHmxTX++6WF8uWH5YGydyg0Tm:14e9Ubi1cXQObnNRXXlWH5idyg0Tm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • 05a4836d3e6e9c98040f457a1d6f78e9_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Ask_Logo.bmp
  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    149adf074d317fbf0d2f17314bd18969


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ask_eula.rtf
    .rtf
  • $PLUGINSDIR/banner.bmp
  • $PLUGINSDIR/banner_chrome.bmp
  • $PLUGINSDIR/banner_chrome_36.bmp
  • $PLUGINSDIR/banner_ff.bmp
  • $PLUGINSDIR/banner_ie.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisXML.dll
    .dll windows:4 windows x86 arch:x86

    1156b4dd8fa8f1d42696b7a2d5b3e139


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/apphelp.dll
    .dll windows:5 windows x86 arch:x86

    ce8eddc68f0d837dc87c8d153c0249c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/soffer.dll
    .dll windows:5 windows x86 arch:x86

    ec7f08258a6e85455901e00bbb9a8ccf


    Code Sign

    Headers

    Imports

    Exports

    Sections