General

  • Target

    25026455524111af713474ec07b072fe_JaffaCakes118

  • Size

    1.0MB

  • MD5

    25026455524111af713474ec07b072fe

  • SHA1

    9bcd399e1a1f009e268ed2a8e7aa9e8af6c14b36

  • SHA256

    387b4cbce159924feb45b6cac31496b5998a77c1b51f07c003718c219cc372d2

  • SHA512

    5d40919478a71d7eae3b84fff341637a6910c0f0f5ffaccb2ba8c3a9b9ac6bf0bd30f67294141f582a11bf1c66117c0ec9246eb5ae48d417a16f6da6d3b77100

  • SSDEEP

    24576:WtC8AmCNFrxqwkRSQem6jPLkX63zOQB4JxMHu95:p8AnNhCcjPLkX63zOQB4z845

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 25026455524111af713474ec07b072fe_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:5 windows x86 arch:x86

    48a5383a7ce39b54ffbdc5f25781b686


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISAppUpdater.dll
    .dll windows:5 windows x86 arch:x86

    9c10882ecc1752a7adcf9647fff861a3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISCommon.dll
    .dll windows:5 windows x86 arch:x86

    649eb6b21323dabd108616010144e431


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PluginInstaller.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/0/version.txt
  • .rsrc/1033/DIALOG/105
  • .rsrc/1033/DIALOG/106
  • .rsrc/1033/DIALOG/111
  • .rsrc/1033/GROUP_ICON/103
  • .rsrc/1033/ICON/1.ico
  • .rsrc/1033/MANIFEST/1
    .xml
  • .text
  • CERTIFICATE
  • [0]
  • [1]
  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsThread.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/$SYSDIR/atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_49_/$_49_/atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_49_/$_49_/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_49_/$_49_/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/QQPCB1AndroidJmp/PluginInfo.xml
  • $_65_/QQPCB1AndroidJmp/QPMJmp.exe
    .exe windows:5 windows x86 arch:x86

    2daa4e251d086a329a58cc8411246764


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/QQPCB1AndroidJmp/QQPCB1AndroidJmp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    40259d25ec2de0cc410f35eed7fa709a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/QQPCB1AndroidJmp/QQPCB1AndroidJmp.png
    .png
  • $_65_/QQPCB2AndroidJmp/PluginInfo.xml
  • $_65_/QQPCB2AndroidJmp/QPMJmp.exe
    .exe windows:5 windows x86 arch:x86

    2daa4e251d086a329a58cc8411246764


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/QQPCB2AndroidJmp/QQPCB2AndroidJmp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    40259d25ec2de0cc410f35eed7fa709a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/QQPCB2AndroidJmp/QQPCB2AndroidJmp.png
    .png
  • Android.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections