General

  • Target

    21722a110bb1e6b58669826818f86cda_JaffaCakes118

  • Size

    1.2MB

  • MD5

    21722a110bb1e6b58669826818f86cda

  • SHA1

    314fb1740ce849295e5c34f71671cf631853872f

  • SHA256

    b157fd3064fc77b986f5333b9f0b898c5ea3677f1434fb8ca2369e18b43af166

  • SHA512

    4b30a12909ed2149e7a076d4b287d19b0fa012365decfe8aef989f330157d8505d1cd0e639127d1a977e8e3a361bd33300662a3ebb0edc8cc23dbd62e7180b5e

  • SSDEEP

    24576:oDX2vzptbfKL1oX1Y5wrrRsrW7RdYxMn4iuKbQaqfQN+Qfsqo:QGvz5Xa0Nsr4Qx64qfqqB0qo

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 21722a110bb1e6b58669826818f86cda_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    6b7d154c806f1e47db325229c300c6df


    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/ExentCtlInstaller.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $TEMP/SDM143/Free Ride Games.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/SDM143/Splash/loader1.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader2.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader3.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader4.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader5.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader6.jpg
    .jpg
  • $TEMP/SDM143/Splasher.dll
    .dll windows:5 windows x86 arch:x86

    8926e573f4b66cfe7558e5db5a6688aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/cmhelper.exe
    .exe windows:4 windows x86 arch:x86

    f5c5d75dcb7ff0affa88aae192f72bf4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/SDM143/resourceDll.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections