General

  • Target

    386f19ee9bbd0f06dd2d88fbd5a8ab8f_JaffaCakes118

  • Size

    8.8MB

  • MD5

    386f19ee9bbd0f06dd2d88fbd5a8ab8f

  • SHA1

    15326a4000c4e4b0676d368ab59194615bf8a8d7

  • SHA256

    a3f7536c3677f32ecf3eff9c321299735936a0dec729823d1f534e720a03463a

  • SHA512

    ff835ec30185a1c48fbe08ce9289e5b495918082a7738bfd7444a34fa97ce6943d83a845fe374ebc8f61318f25c346768eda5c864f4079478c4e8360858a2e0d

  • SSDEEP

    196608:Z21IFtO2J/9y72Xc15VjZPofqTFnfiM9yTSaceWnT:w6FtBJ/9y72s1iAZfbCr6nT

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 386f19ee9bbd0f06dd2d88fbd5a8ab8f_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $DESKTOP/BitsDuJour.url
  • $DESKTOP/Linkman PDF Manual.url
  • $DESKTOP/Linkman Video Tutorial.url
  • $DOCUMENTS/Linkman/Databases/mySampleLinks.licons
  • $DOCUMENTS/Linkman/Databases/mySampleLinks.lmd
  • $DOCUMENTS/Linkman/FastLinks.dat
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:5 windows x86 arch:x86

    e02b24cfd7b5c55e4686d868682e10f4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/install_splash.jpg
    .jpg
  • $PLUGINSDIR/installer_chrome_256.bmp
  • $PLUGINSDIR/installer_firefox.bmp
  • $PLUGINSDIR/installer_ie_256.bmp
  • $PLUGINSDIR/installer_opera_256.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    7efb019e000b6e0291c32d00fe622590


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $SMPROGRAMS/Linkman Pro/Linkman PDF Manual.url
  • $SMPROGRAMS/Linkman Pro/Linkman Video Tutorial.url
  • $TEMP/Linkman.oex
    .zip
  • config.xml
    .xml
  • css/options.css
  • icon.png
    .png
  • icons/linkman16.png
    .png
  • icons/linkman24.png
    .png
  • includes/user.js
    .js
  • index.html
    .html
  • js/background.js
    .js
  • js/popup.js
    .js
  • options.html
    .html .js polyglot
  • popup.html
    .html
  • $TEMP/LinkmanFox.xpi
    .zip
  • META-INF/manifest.mf
  • META-INF/mozilla.rsa
  • META-INF/mozilla.sf
  • chrome.manifest
  • chrome/content/browser.xul
    .xml
  • chrome/content/linkman_add16.png
    .png
  • chrome/content/linkman_add24.png
    .png
  • chrome/content/linkman_addall16.png
    .png
  • chrome/content/linkman_addall24.png
    .png
  • chrome/content/linkman_addedit16.png
    .png
  • chrome/content/linkman_addedit24.png
    .png
  • chrome/content/linkman_search16.png
    .png
  • chrome/content/linkman_search24.png
    .png
  • chrome/content/linkman_show16.png
    .png
  • chrome/content/linkman_show24.png
    .png
  • chrome/content/linkmanfox.js
    .js
  • chrome/content/options.js
    .js
  • chrome/content/options.xul
    .xml
  • chrome/content/style.css
  • install.rdf
    .xml
  • Browsers.xdb
    .xml
  • Browsers.xml
    .xml
  • Databases/mySampleLinks.licons
  • Databases/mySampleLinks.lmd
  • FastLinks.dat
  • Languages/Catalan.olf
  • Languages/Czech.olf
  • Languages/Danish.olf
  • Languages/Dutch.olf
  • Languages/English.olf
  • Languages/Finnish.olf
  • Languages/French.olf
  • Languages/German.olf
  • Languages/Hungarian.olf
  • Languages/Italian.olf
  • Languages/Korean.olf
  • Languages/Polish.olf
  • Languages/Portuguese.olf
  • Languages/Russian.olf
  • Languages/Spanish.olf
  • Languages/readme_first.txt
  • Linkman.chm
    .chm
  • Linkman.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • LinkmanBrowsers.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • LinkmanCom.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Output/SampleLinkmanOutput1.htm
    .html
  • Output/SampleLinkmanOutput2.htm
    .html
  • Plugins/oplugin.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • Templates/Html Example 1.let
  • Templates/Html Example 2.let
  • Templates/Html Example 3.let
  • Templates/Html Example 4.let
  • Templates/Html Example 5.let
  • Templates/test.let
  • Templates/tsv.let
  • Templates/xml.let
  • Uninstaller.exe
    .exe windows:1 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    bf76bfdbfb2f04df3961cd140f67140b


    Headers

    Imports

    Exports

    Sections

  • libssl32.dll
    .dll windows:5 windows x86 arch:x86

    627fbca4ccabadcce3ef36a95a88cc47


    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    923aa130c21002b50b462e446b3be0d9


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    627fbca4ccabadcce3ef36a95a88cc47


    Headers

    Imports

    Exports

    Sections

  • uninst-Linkman.exe.nsis
  • usb.dat