Overview

overview

7

Static

static

7

2e4e11e17c...18.exe

windows7-x64

7

2e4e11e17c...18.exe

windows10-2004-x64

7

$PLUGINSDIR/7za.exe

windows7-x64

1

$PLUGINSDIR/7za.exe

windows10-2004-x64

1

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/Aero.dll

windows7-x64

7

$PLUGINSDIR/Aero.dll

windows10-2004-x64

7

$PLUGINSDIR/Forge.bat

windows7-x64

1

$PLUGINSDIR/Forge.bat

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows7-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$TEMP/spltmp.ps1

windows7-x64

3

$TEMP/spltmp.ps1

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e4e11e17c58509e48a79765a70c96f3_JaffaCakes118

  • Size

    909KB

  • MD5

    2e4e11e17c58509e48a79765a70c96f3

  • SHA1

    d2e8bf23cacdfdc74d0e37b0a621bf4dce82c3a4

  • SHA256

    13326f19316078fe00a986f6315168b458ac26066e0600055ebc2296fdc82bb7

  • SHA512

    9b3fb034fc6a398bdba283612c52f0564526993775aa225ccad244fc036cfbaf95cf209249fd4215a69f935d4b44f389200b4c2354926d349e515db235b721eb

  • SSDEEP

    24576:G8b3na63pPTETQO+cDOxg9KRrEyPSocvg1B9AX:G8bqKhTwQcOUKrPev+AX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 2e4e11e17c58509e48a79765a70c96f3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/7za.exe
    .exe windows:4 windows x86 arch:x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Aero.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/Forge.bat
  • $PLUGINSDIR/Form1.ini
  • $PLUGINSDIR/Form2.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:4 windows x86 arch:x86

    93de66a5e39e0e29fa0c7c11ceeed8e4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/spltmp.bmp
    .ps1