General

  • Target

    13dd6357cdfbce65b74225fa6fa8f549_JaffaCakes118

  • Size

    1.6MB

  • MD5

    13dd6357cdfbce65b74225fa6fa8f549

  • SHA1

    52b3d8be99aa29feef563f90a0e73a3f6504b282

  • SHA256

    fabed020a1738bfd688115afa14988c452a3e778f688eca2e9c53d4b7914a77e

  • SHA512

    7d7cd7a09ac30dd8cb7c3b443344201d32ddc3c6b88285028d735986b7d5d2e9d080884fff4a08bcfec6543d6bd5da02449f722295c85f5fcc8058eb4fbff66c

  • SSDEEP

    24576:xtmRgSWthQHWKaOvDH7moUtu27AyrMVEe3Nb4ZLkopK6siA6v7i/8NOEdo77Nrn:xNnhSWiHxOu2YVnd4Z3p3sh6v7uNL

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 13dd6357cdfbce65b74225fa6fa8f549_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellLink.dll
    .dll windows:5 windows x86 arch:x86

    50112fdd20200a51dbedeae8f1f33cdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    ea0aa0a9e9dc166e514586b9219c0789


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System3.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:5 windows x86 arch:x86

    09a3e096fa98fc82beb9603daab2ea15


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    87911d4ed7691bf75373ec9593ae9132


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    4fb4d15e957b6564bf15c23e80f0202a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsResize.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/picLeft.bmp
  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/Chromium.dll
    .dll windows:6 windows x86 arch:x86

    f2358c15a68c5e7ba6256467178b2b1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/DownloadHelper.dll
    .dll windows:5 windows x86 arch:x86

    b48431691ead7ee714d0c5b64e5a9920


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/InstallerHelper.dll
    .dll windows:5 windows x86 arch:x86

    eedd1bc7185c5bcc455534c5db3adf55


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/$_2_/InstallerHomepageHelper.dll
    .dll windows:5 windows x86 arch:x86

    14f9048f1870dffad00cd1d524a6bce1


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/$_2_/InstallerSearchHelper.dll
    .dll windows:5 windows x86 arch:x86

    d0e4d126b4bee2e7809b065fb6f9883a


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/$_2_/KompexSQLiteWrapper.dll
    .dll windows:5 windows x86 arch:x86

    b79ba4ab2edf6a6d884a8363550f0fa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/freebl3.dll
    .dll windows:6 windows x86 arch:x86

    68765e49af812cea06653c4ddee9320d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/nspr4.dll
    .dll windows:6 windows x86 arch:x86

    a6070e3824e66675bb029a2cf7952a4f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/nss3.dll
    .dll windows:6 windows x86 arch:x86

    9e2f8a8cfc34da6dfd8f2fda9de568a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/nssutil3.dll
    .dll windows:6 windows x86 arch:x86

    6ba16e7e12b3827a81a688ff0a5191a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/plc4.dll
    .dll windows:6 windows x86 arch:x86

    4598533a0c3b6c5ddb9612a89de425ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/plds4.dll
    .dll windows:6 windows x86 arch:x86

    4f9a53fbf939884bc7e65bde68799fc4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/softokn3.dll
    .dll windows:6 windows x86 arch:x86

    f62703f3be4a59d359a62952d431248f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_2_/sqlite3.dll
    .dll windows:6 windows x86 arch:x86

    08e0c5c4d25d1d7e6ba2923f9444c9ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_39_/$DESKTOP/[Torrents3D.ru]_3618.torrent
  • $_39_/SoftInstallerHelper.dll
    .dll windows:5 windows x86 arch:x86

    64c8b63c9b43c1627a109642820cff3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_39_/soft.json