General

  • Target

    201df4e8a9f4ed1210d9f6e969e7d0d6_JaffaCakes118

  • Size

    1.2MB

  • MD5

    201df4e8a9f4ed1210d9f6e969e7d0d6

  • SHA1

    4fdc5b02e92874e7eccba4d77c8815b44fc80230

  • SHA256

    36026ae67867a75d0a02b8f7d4d72f6b52790ef55d8eee8a326af1de95802896

  • SHA512

    b0d9600757f8a6f2a2227c3fe8e4161d862dbfe4b2e3e3091668cd37d079f86c9e6716f8e539649e48689e59d745b5d274481a2b5b37a9e43a35e40b546c53a9

  • SSDEEP

    24576:AQX2vzpbZGaKBVlEn+f3VgikCFkJ9k4i/izgNwMqfQN+Qfsqz:jGvz7GfY+f3VOCiJS46iwwMqqB0qz

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 201df4e8a9f4ed1210d9f6e969e7d0d6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    6b7d154c806f1e47db325229c300c6df


    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/ExentCtlInstaller.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $TEMP/SDM143/Free Ride Games.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/SDM143/Splash/loader1.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader2.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader3.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader4.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader5.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader6.jpg
    .jpg
  • $TEMP/SDM143/Splasher.dll
    .dll windows:5 windows x86 arch:x86

    8926e573f4b66cfe7558e5db5a6688aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/cmhelper.exe
    .exe windows:4 windows x86 arch:x86

    f5c5d75dcb7ff0affa88aae192f72bf4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/SDM143/resourceDll.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections