General

  • Target

    32b55c58cb9d5d1c8b381f2266461f0a_JaffaCakes118

  • Size

    45.4MB

  • MD5

    32b55c58cb9d5d1c8b381f2266461f0a

  • SHA1

    b988aa2847b2f1d289ade21a7327d62da2934919

  • SHA256

    bb0465740955bd3a77bbc27f0a1ff670f378fa236b12e6608fc0f03aa92e7a9b

  • SHA512

    03aeca2d15f1f0a90fca6d215166a3a4abd04559bae60c00392426f8e0e2c6a19919c52c8ae0632bd1a5f325f72b4775e1af876780845ff544b4f8ff0e7406ff

  • SSDEEP

    786432:yzkViQJdr8Qf4FVm9Gn9dW9R67gqfj1iogZMikVi7qCHuf4j+a9IBP66zSMjt:y4ViQQQf8n9E67gIjA5J7buf4j9IBPvj

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • 32b55c58cb9d5d1c8b381f2266461f0a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Fusion.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/Left.bmp
  • $PLUGINSDIR/Logo.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • BCGCBPRO2500u120.dll
    .dll windows:5 windows x86 arch:x86

    3e635a3111dd0bd8db9aabaf47c1d54d


    Headers

    Imports

    Exports

    Sections

  • FFImage.dll
    .dll windows:5 windows x86 arch:x86

    b846099947e7a28bb74684463a6d43b1


    Headers

    Imports

    Exports

    Sections

  • FFInst.exe
    .exe windows:5 windows x86 arch:x86

    c7edcebfa88aa5bfca2475ed98c573fc


    Code Sign

    Headers

    Imports

    Sections

  • FFModules/Encoder/Doc/EBookCodec.exe
    .exe windows:5 windows x86 arch:x86

    f2a39dd7cc53da08aa835ebd304b0daa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/Doc/PDF/data/LICENSE
  • FFModules/Encoder/Doc/PDF/data/base.css
    .vbs
  • FFModules/Encoder/Doc/PDF/data/base.css.in
    .vbs
  • FFModules/Encoder/Doc/PDF/data/base.min.css
  • FFModules/Encoder/Doc/PDF/data/build_css.sh
    .sh linux
  • FFModules/Encoder/Doc/PDF/data/build_js.sh
    .sh .js linux polyglot
  • FFModules/Encoder/Doc/PDF/data/compatibility.min.js
    .js
  • FFModules/Encoder/Doc/PDF/data/fancy.css
    .vbs
  • FFModules/Encoder/Doc/PDF/data/fancy.css.in
    .vbs
  • FFModules/Encoder/Doc/PDF/data/fancy.min.css
  • FFModules/Encoder/Doc/PDF/data/manifest
    .js
  • FFModules/Encoder/Doc/PDF/data/pdf2htmlEX-64x64.png
    .png
  • FFModules/Encoder/Doc/PDF/data/pdf2htmlEX.js
    .js
  • FFModules/Encoder/Doc/PDF/data/pdf2htmlEX.js.in
    .js
  • FFModules/Encoder/Doc/PDF/data/pdf2htmlEX.min.js
    .js
  • FFModules/Encoder/Doc/PDF/pdf2htmlEX.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FFModules/Encoder/MP4Box/js.dll
    .dll windows:5 windows x86 arch:x86

    4c820fad8df933de22869a11d0c3557c


    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/MP4Box/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    c604899438b3303045c7712b7d0267be


    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/MP4Box/libgpac.dll
    .dll windows:5 windows x86 arch:x86

    c3c1d64d8d5babf05fabe271a68188b0


    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/MP4Box/mp4box.exe
    .exe windows:5 windows x86 arch:x86

    9285ffe6341b24639176eda6f82d825f


    Headers

    Imports

    Sections

  • FFModules/Encoder/MP4Box/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/MP4Box/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    2fe0524b9aad81a28cfe86ffb6620e6c


    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/dsnative.dll
    .dll windows:4 windows x86 arch:x86

    6f9c4b2279ff8e85e729b297c88da96d


    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/ffmpeg.exe
    .exe windows:4 windows x86 arch:x86

    b152d8001c70ac5d33a28a9358e5d993


    Headers

    Imports

    Sections

  • FFModules/Encoder/fonts/conf.d/10-autohint.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/10-scale-bitmap-fonts.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/20-unhint-small-vera.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/25-unhint-nonlatin.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/30-metric-aliases.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/30-urw-aliases.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/40-nonlatin.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/45-latin.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/49-sansserif.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/50-user.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/51-local.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/60-latin.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/65-fonts-persian.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/65-nonlatin.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/69-unifont.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/70-no-bitmaps.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/80-delicious.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/90-synthetic.conf
    .xml
  • FFModules/Encoder/fonts/conf.d/README
  • FFModules/Encoder/fonts/fonts.conf
    .xml
  • FFModules/Encoder/libfaac.dll
    .dll windows:4 windows x86 arch:x86

    22ceb906b96f5af8e01d21a3a1de1a98


    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/mac.exe
    .exe windows:4 windows x86 arch:x86

    d4465f0f0cfc7ec4f4af19c705bd955a


    Headers

    Imports

    Exports

    Sections

  • FFModules/Encoder/mencoder.exe
    .exe windows:4 windows x86 arch:x86

    6c016af07953e1588d956f1c3f264825


    Headers

    Imports

    Sections

  • FFModules/Encoder/mkvmerge.exe
    .exe windows:4 windows x86 arch:x86

    79072d2e8037e89c4f0cb290e7c14e3c


    Headers

    Imports

    Sections

  • FFModules/Encoder/mplayer.exe
    .exe windows:4 windows x86 arch:x86

    3ecf045fcd87ed50ba79403de8aa3c3c


    Headers

    Imports

    Sections

  • FFModules/Encoder/mplayer/codecs.conf.in
  • FFModules/Encoder/mplayer/config
  • FFModules/Encoder/mplayer/config.sample
  • FFModules/Encoder/mplayer/input.conf
  • FFModules/Encoder/mplayer/subfont.ttf
  • FFModules/Encoder/tsMuxer.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • FFModules/Package/PTInstOnline.exe
    .exe windows:5 windows x86 arch:x86

    f2a39dd7cc53da08aa835ebd304b0daa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FFModules/TimGM6mb.sf2
  • FFModules/timidity.cfg
  • FFModules/timidity.exe
    .exe windows:4 windows x86 arch:x86

    60f9f6c9f0c5963bfe0c0c665ebef895


    Headers

    Imports

    Sections

  • FormatFactory.exe
    .exe windows:5 windows x86 arch:x86

    500b47b619e9d1b471736521fe73b50e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Language/Albanian.txt
  • Language/Arabic.txt
  • Language/Armenian.txt
  • Language/Azerbaijani.txt
  • Language/Basque.txt
  • Language/Belarusian.txt
  • Language/Bengali.txt
  • Language/Bosnian.txt
  • Language/Bulgarian.txt
  • Language/Burmese.txt
  • Language/Catalan.txt
  • Language/Chinese-Kazakh.txt
  • Language/Chinese-Kyrgyz.txt
  • Language/Chinese-Simplified.txt
  • Language/Chinese-Traditional.txt
  • Language/Chinese-Uyghurche.txt
  • Language/Croatian.txt
  • Language/Czech.txt
  • Language/Danish.txt
  • Language/Dutch.txt
  • Language/Estonian.txt
  • Language/Farsi.txt
  • Language/Finnish.txt
  • Language/French.txt
  • Language/Galician.txt
  • Language/Georgian.txt
  • Language/German.txt
  • Language/Greek.txt
  • Language/Hebrew.txt
  • Language/Hindi-India.txt
  • Language/Hungarian.txt
  • Language/Indonesian.txt
  • Language/Italian.txt
  • Language/Japanese.txt
  • Language/Khmer.txt
  • Language/Korean.txt
  • Language/Kurdish.txt
  • Language/Kyrgyz.txt
  • Language/Language.lst
  • Language/Latina.txt
  • Language/Lithuanian.txt
  • Language/Macedonian.txt
  • Language/Mongolian-Cyrillic.txt
  • Language/Norwegian.txt
  • Language/Persian.txt
  • Language/Philippines.txt
  • Language/Polish.txt
  • Language/Portuguese.txt
  • Language/Romanian.txt
  • Language/Russian.txt
  • Language/Serbian-Cyrillic.txt
  • Language/Serbian-Latin.txt
  • Language/Sinhala-SriLanka.txt
  • Language/Slovak.txt
  • Language/Slovenian.txt
  • Language/Spanish-Traditional.txt
  • Language/Spanish.txt
  • Language/Swedish.txt
  • Language/Tajik.txt
  • Language/Tatar.txt
  • Language/Thai.txt
  • Language/Turkish.txt
  • Language/Ukrainian.txt
  • Language/Urdu.txt
  • Language/Uyghurche(Latin).txt
  • Language/Vietnamese.txt
  • Language/Yiddish.txt
  • License.txt
  • MediaInfo.dll
    .dll windows:5 windows x86 arch:x86

    497e3864e078fa536a0b2196aafbf627


    Headers

    Imports

    Exports

    Sections

  • PicConvert.dll
    .dll windows:5 windows x86 arch:x86

    55911282b76d83884d0af2636bc8733d


    Headers

    Imports

    Exports

    Sections

  • ShellEx64_103.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    c0396c9b4ca2a35e041224de7b283890


    Headers

    Imports

    Exports

    Sections

  • ShellEx_103.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    ec8ceb08d9327659f0a6c0b3b261a16c


    Headers

    Imports

    Exports

    Sections

  • mfc120u.dll
    .dll windows:6 windows x86 arch:x86

    bf9bb776792ebfae57684ede20e9eee4


    Code Sign

    Headers

    Imports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • updatelog.txt