General

  • Target

    0ef66f2840ef9f05e6464f28c533b0ce_JaffaCakes118

  • Size

    1.3MB

  • MD5

    0ef66f2840ef9f05e6464f28c533b0ce

  • SHA1

    6b3f96c5205b74e8ddfa26ce41576610ccb0535b

  • SHA256

    45798ccdfc71e4201028299c58bb304f46a349c9d7f6ae0b032015027d51cc9d

  • SHA512

    2b5b1b606439066d7291afe83eb516b8cf528554e8a3ed06cfc1c147d86a9d0c1ab8468e5697c2d3d77811d6c76535f06cbb00a3fe3a470b9a0ad1dbc82a3b65

  • SSDEEP

    24576:8Qo3bdpWBW5bZnMBU+CJB7S+6ME5GnaCxjzdBmg8:Ro3BeGb8OBL6OasFR8

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ef66f2840ef9f05e6464f28c533b0ce_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Ask_Logo.bmp
  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    149adf074d317fbf0d2f17314bd18969


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ask_eula.rtf
    .rtf
  • $PLUGINSDIR/banner.bmp
  • $PLUGINSDIR/banner_chrome.bmp
  • $PLUGINSDIR/banner_chrome_36.bmp
  • $PLUGINSDIR/banner_ff.bmp
  • $PLUGINSDIR/banner_ie.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisXML.dll
    .dll windows:4 windows x86 arch:x86

    1156b4dd8fa8f1d42696b7a2d5b3e139


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:4 windows x86 arch:x86

    4c83540592fdac84a77cc7a54331a408


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/apphelp.dll
    .dll windows:5 windows x86 arch:x86

    a67f45b2e1e209d365ca7136c58ff087


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/soffer.dll
    .dll windows:5 windows x86 arch:x86

    ec7f08258a6e85455901e00bbb9a8ccf


    Headers

    Imports

    Exports

    Sections