General

  • Target

    353b68c0c6f79f71d976d04326a6a32a_JaffaCakes118

  • Size

    31.0MB

  • MD5

    353b68c0c6f79f71d976d04326a6a32a

  • SHA1

    bfd8fc6dbeaac9432627d57d972d1a596caac777

  • SHA256

    a7fa9fa9b5bec7ccfd2f793e6e47052f6d94a0a04b759b36ec7d303023f4572a

  • SHA512

    b9661dfd123aa2cd1ad3111ac45756b32c8e8211fc22cd43b02fd8ab0ca1b1a82503ad688f12a6d565226adcf5b3e5370f391df0fd1784d1d4eca7ad94e0ed7a

  • SSDEEP

    786432:k0VobNHzxLN57InxusAvuBZxU9dsfArOOh20jHYyS:3ONHzxLDcnmYKdsf/yHXS

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • 353b68c0c6f79f71d976d04326a6a32a_JaffaCakes118
    .7z
  • 2345Extract.dll
    .dll windows:5 windows x86 arch:x86

    0404c1a91b5eff8a37518a39fc364555


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2345GlobalData.exe
    .exe windows:5 windows x86 arch:x86

    3c32740050e6f8e8e64cdfde702ee851


    Headers

    Imports

    Sections

  • 2345InsHisMgr.exe
    .exe windows:5 windows x86 arch:x86

    70c3c57a1519b45bd1fdb0647397fae3


    Headers

    Imports

    Sections

  • 2345MiniUI.dll
    .dll windows:5 windows x86 arch:x86

    0b7943a13cd13f6f34fb5907c45da678


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2345PopupInpt.exe
    .exe windows:5 windows x86 arch:x86

    c8e6bfd7111a5ac160c61ab47f973bd7


    Headers

    Imports

    Sections

  • 2345RTPLog.exe
    .exe windows:5 windows x86 arch:x86

    fc7d7c3499970671aa928632cc1c9acf


    Headers

    Imports

    Sections

  • 2345RTProtect.exe
    .exe windows:5 windows x86 arch:x86

    8dc98ff54ec8763dd93df35ab37fa317


    Headers

    Imports

    Sections

  • 2345SFGuard.exe
    .exe windows:5 windows x86 arch:x86

    dfa4c649a2742527552fa7065dfcff68


    Headers

    Imports

    Sections

  • 2345SFGuard64.exe
    .exe windows:5 windows x64 arch:x64

    8f645733b254e9da6c7b3e13ab8be0c1


    Headers

    Imports

    Sections

  • 2345SFWebShell.exe
    .exe windows:5 windows x86 arch:x86

    16ac3338ec179186d688c9dfbddcc23b


    Headers

    Imports

    Sections

  • 2345SafeBho.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    5e4895f23a624756bf6d0e9360223d70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2345SafeBho64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    c5f565a8bddfc7b083af797df9dbc1e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2345SafeCenterCrashReport.exe
    .exe windows:5 windows x86 arch:x86

    7dfa396d51c1e69dbc8c23161196d8af


    Headers

    Imports

    Sections

  • 2345SafeCenterDiff.exe
    .exe windows:5 windows x86 arch:x86

    5202d4c13bb133c538c249fa5dd7af60


    Headers

    Imports

    Sections

  • 2345SafeCenterInstaller.exe
    .exe windows:5 windows x86 arch:x86

    727316078dd57fc2cccc12a430eed242


    Headers

    Imports

    Sections

  • 2345SafeCenterMiniPage.exe
    .exe windows:5 windows x86 arch:x86

    4612627a203a51b9b6de2fa74d2d13eb


    Headers

    Imports

    Sections

  • 2345SafeCenterSvc.exe
    .exe windows:5 windows x86 arch:x86

    4d94ee94e65a22a1817743a77c3f79f9


    Headers

    Imports

    Sections

  • 2345SafeCenterUpdate.exe
    .exe windows:5 windows x86 arch:x86

    6a933323e73acabc900169e037c201bf


    Headers

    Imports

    Sections

  • 2345VirusScan.exe
    .exe windows:5 windows x86 arch:x86

    2256af3e61e0350d91d4a9fa08d8396a


    Headers

    Imports

    Sections

  • Data/AvUpdate411.dat
  • Data/BA01.data
  • Data/BAA01.data
  • Data/BAC01.data
  • Data/BAD01.data
  • Data/BAE01.data
  • Data/BAF01.data
  • Data/BAG01.data
  • Data/BAH01.data
  • Data/BAJ01.data
  • Data/BAL01.data
  • Data/BAM01.data
  • Data/BAO01.data
  • Data/BAP01.data
  • Data/BAQ01.data
  • Data/BAR01.data
  • Data/BAS01.data
  • Data/BAT01.data
  • Data/BAU01.data
  • Data/BAV01.data
  • Data/BAX01.data
  • Data/BAY01.data
  • Data/BAZ01.data
  • Data/BB01.data
  • Data/BBA01.data
  • Data/BBB02.data
  • Data/BBC01.data
  • Data/BBD01.data
  • Data/BC01.data
  • Data/BD01.data
  • Data/BE01.data
  • Data/BF01.data
  • Data/BG01.data
  • Data/BH01.data
  • Data/BK01.data
  • Data/BL01.data
  • Data/BM01.data
  • Data/BN01.data
  • Data/BO01.data
  • Data/BP01.data
  • Data/BQ01.data
  • Data/BR01.data
  • Data/BS01.data
  • Data/BT01.data
  • Data/BU01.data
  • Data/BY01.data
  • Data/Recover/64_2345Base.data
  • Data/Recover/64_2345ExProtect.data
  • Data/Recover/64_2345Iron.data
  • Data/Recover/64_2345Misc.data
  • Data/Recover/64_2345NetMgr.data
  • Data/Recover/64_2345Prot.data
  • Data/Recover/64_2345SafeCenterSvc.data
  • Data/Recover/86_2345Base.data
  • Data/Recover/86_2345ExProtect.data
  • Data/Recover/86_2345Iron.data
  • Data/Recover/86_2345Misc.data
  • Data/Recover/86_2345NetMgr.data
  • Data/Recover/86_2345Prot.data
  • Data/Recover/86_2345SafeCenterSvc.data
  • DriverApi.dll
    .dll windows:5 windows x86 arch:x86

    60da8136362744d759fbd606581d1559


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DriverInstall.dll
    .dll windows:5 windows x86 arch:x86

    deaae4c4d0728a09ddffdb4e325594d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Helper_2345SafeCenter.exe
    .exe windows:5 windows x86 arch:x86

    f57d39997144e41a01e3577caef20359


    Headers

    Imports

    Sections

  • LicXPlugin.dll
    .dll windows:5 windows x86 arch:x86

    c28e53744e2eeab7fe35fd4db9958473


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NsProtectApi.dll
    .dll windows:5 windows x86 arch:x86

    c5a83fe64855cf7ff48b346aa22d16ac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PopupsMutex.dll
    .dll windows:5 windows x86 arch:x86

    0e54194c0e7f7a26af950a3bd2d0067b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProtectApi.dll
    .dll windows:5 windows x86 arch:x86

    ada04572cc90acb1f2a2e562b43a6ad8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProtectApi64.dll
    .dll windows:5 windows x64 arch:x64

    cdb9e2f9e375e4f245122efd6c9abc10


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProtectLogistics.dll
    .dll windows:5 windows x86 arch:x86

    48331d02f3cccbe76cd62fcd71945d14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeBaseMon.dll
    .dll windows:5 windows x86 arch:x86

    f4ca8bd30ab458f1107b72c1bb372c42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeBaseMon64.dll
    .dll windows:5 windows x64 arch:x64

    84671783ee7d2340abf50a885d0fa351


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeCenterUpdate.dll
    .dll windows:5 windows x86 arch:x86

    cc4a94d7fa4a4bc8e315f5e1d0b24258


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeExpMon.dll
    .dll windows:5 windows x86 arch:x86

    e4a1935fbeb13526ea6ff53dd095b1e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeExpMon64.dll
    .dll windows:5 windows x64 arch:x64

    5030ad52430fb3aecd14109fa89b86df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeWebMon.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • SafeWebMon64.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections

  • SdAbib.dll
    .dll windows:5 windows x86 arch:x86

    8bdbf391886cf47ea973dbaee655cd8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdAntiVBusCore.dll
    .dll windows:5 windows x86 arch:x86

    ac49c35016fa720ca1673a88e760f6ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdAntiVCache.dll
    .dll windows:5 windows x86 arch:x86

    6dc2873049ca35608dfb205368e792fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdAntiVCloud.dll
    .dll windows:5 windows x86 arch:x86

    476b8d50a0975da9d0733bc853bbab01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdAntiVEngine.dll
    .dll windows:5 windows x86 arch:x86

    63b4aadf9a97c7ab34303b236c43bbb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdAviraSndPlugin.dll
    .dll windows:5 windows x86 arch:x86

    5799887a1347a7f59d4b768341f72b78


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdConfigCenter.dll
    .dll windows:5 windows x86 arch:x86

    857b2c1176c1626fc3fa30e0679f7cbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdDefenceLogic.dll
    .dll windows:5 windows x86 arch:x86

    7d1a760ca1b81eabbc73c14900bab2eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdEsswSndPlugin.dll
    .dll windows:5 windows x86 arch:x86

    677f320b86d1a13088b8e29e1cfdaf07


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdGDOperate.dll
    .dll windows:5 windows x86 arch:x86

    d3a9451c11f67fe67254ce2aa62198f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdHipsDefProtect.dll
    .dll windows:5 windows x86 arch:x86

    c75eaa2ba192ebf688765347453268fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdHipsLogic.dll
    .dll windows:5 windows x86 arch:x86

    d3962be0c2a124d643e8cad7adcdfbc9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdHipsUpdate.dll
    .dll windows:5 windows x86 arch:x86

    56a09bd0e0e53f7e951516d10baad661


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdHipsWebProtect.dll
    .dll windows:5 windows x86 arch:x86

    45a125af49c14df5e0d115f7463321ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdInstallNotify.dll
    .dll windows:5 windows x86 arch:x86

    a879f4ea3141a5647c71e3c5b1ba267d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdIronSlot.dll
    .dll windows:5 windows x86 arch:x86

    aa2551a3ee938939db414fa1fe98bb5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdMsgProtect.dll
    .dll windows:5 windows x86 arch:x86

    ce670e58111edb2401db9e5a084c289a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdProcChainMon.dll
    .dll windows:5 windows x86 arch:x86

    bbce32edc46b747b60d84b089e75719b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdRTPLog.dll
    .dll windows:5 windows x86 arch:x86

    3944bb4148df09449d4c7457388cd93f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdRTPMsgController.dll
    .dll windows:5 windows x86 arch:x86

    34a6b8c6a61328540dc58294e7cfb77d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdRTProtectUI.dll
    .dll windows:5 windows x86 arch:x86

    dcb1ac7314d7effc1186ada6e20a6090


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdReflectDefender.dll
    .dll windows:5 windows x86 arch:x86

    e068eee37e2bea46a26c5102905e9655


    Code Sign

    Headers

    Imports

    Sections

  • SdRtPopupInpt.dll
    .dll windows:5 windows x86 arch:x86

    b85972288a0a8eb2627a461a790dd6f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdSMgr.dll
    .dll windows:5 windows x86 arch:x86

    5cbbe451a3ca1efa4ca0ff28de1466ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdSMgrPlugin.dll
    .dll windows:5 windows x86 arch:x86

    570e95b08dbe54f6a575951944e3358e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdSvcMon.dll
    .dll windows:5 windows x86 arch:x86

    5d58db3064a4f26e61b621f07f4b7870


    Code Sign

    Headers

    Imports

    Sections

  • SdSvcMon64.dll
    .dll windows:5 windows x64 arch:x64

    40d2425a2f524d97023980fdc74785a4


    Code Sign

    Headers

    Imports

    Sections

  • SdTaskSysPlugin.dll
    .dll windows:5 windows x86 arch:x86

    a4b526877ba7679bd03c405081f61700


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdTrojaneEngine.dll
    .dll windows:5 windows x86 arch:x86

    dad2dd6a3b1c105de5d2ba8fe200a076


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdUIList.dll
    .dll windows:5 windows x86 arch:x86

    6146ae58fb6d2ba4fe8a3b59bbb72fcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SdVirusCloud.dll
    .dll windows:5 windows x86 arch:x86

    88171c65b7afc6dfb45265d9c7bee2b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TkNitrome.dll
    .dll windows:5 windows x86 arch:x86

    05c54dee83234a06797545794c191a15


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TkNitrome64.dll
    .dll windows:5 windows x64 arch:x64

    61ef476387cdcd6a494bc60f607b75a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WebProtect.dll
    .dll windows:5 windows x86 arch:x86

    f71d1847ef2be549b0d4955b61b30961


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • breakpad.dll
    .dll windows:5 windows x86 arch:x86

    845a46e32ddf7498a6606d5fb1efec96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • coral_extract.dll
    .dll windows:4 windows x86 arch:x86

    27078d36f37371b0a00fb89ab0cc3581


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • courgette_dll.dll
    .dll windows:5 windows x86 arch:x86

    160ac172e0449b6b838fd4afd801d697


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • crash_service.dll
    .dll windows:5 windows x86 arch:x86

    f42ee76299a94ea0cd8ce3c2e097b27c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mfc120u.dll
    .dll windows:6 windows x86 arch:x86

    bf9bb776792ebfae57684ede20e9eee4


    Code Sign

    Headers

    Imports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections