General

  • Target

    2d9d99a948ffa9a265b8b87aa529667e_JaffaCakes118

  • Size

    247KB

  • MD5

    2d9d99a948ffa9a265b8b87aa529667e

  • SHA1

    bf2f2b98d14107bae7c4d7c077f4e7efc75a0f8e

  • SHA256

    14d12251bc5efdac54cc20ef3e0471449417b487e91e9ab901d5991b16ab995e

  • SHA512

    a860b972dcb535daa8e8657f228de86b5b439b72bbbabbdbfa7fde807418c2c5e603c43cea3cf284d151599f247f53cd54c8c570c15a609ad0ed885fd9131525

  • SSDEEP

    3072:dFXoDt6QAmP/NO4v4ZkxhJduC6NtInmGUZRxGw0aCGy+V7WZiwEK9DOrXn6PxJy:YAQnIaoYbYZyw3BHdADODn6PLy

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2d9d99a948ffa9a265b8b87aa529667e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    2c9af842676b96750379e168992b2ead


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a576be1e9e1e488f8ee747d4b18fa7df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    389abcab5eb660264df56ed18f31520e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    4fb4d15e957b6564bf15c23e80f0202a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/360TS.jpg
    .jpg