General

  • Target

    2a7d52f3f3e084b59fb952af99726aa1_JaffaCakes118

  • Size

    247KB

  • MD5

    2a7d52f3f3e084b59fb952af99726aa1

  • SHA1

    6a8fd85e43f8d9a321ece6fcc5d77b96d30a3526

  • SHA256

    20def83b340c1c8d5fe07dd4eced621d56bcbfb0199078d7ddc6a0f676967396

  • SHA512

    5f679d369a2ddee182f26d1381863c4078c61a29a61670c03fcb920fdd5474540643d3973197ca92dab29bda4d3e562720bf9c2cea90f69f84e5085c000039dd

  • SSDEEP

    3072:aFXoDt6QAmP/NO4v4ZkxhJKKCtttttttttttttttttpttttttttttttttttqbfnN:7AQnIaoYQvASgzfxzILR6GL0

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2a7d52f3f3e084b59fb952af99726aa1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    2c9af842676b96750379e168992b2ead


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a576be1e9e1e488f8ee747d4b18fa7df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    389abcab5eb660264df56ed18f31520e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    4fb4d15e957b6564bf15c23e80f0202a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/360TS.jpg
    .jpg