Overview

overview

7

Static

static

7

PEiD/PESniffer.dll

windows7-x64

1

PEiD/PESniffer.dll

windows10-2004-x64

3

PEiD/PEiD_...��.exe

windows7-x64

7

PEiD/PEiD_...��.exe

windows10-2004-x64

7

PEiD/PEiD_...��.exe

windows7-x64

7

PEiD/PEiD_...��.exe

windows10-2004-x64

7

PEiD/mfc70.dll

windows7-x64

1

PEiD/mfc70.dll

windows10-2004-x64

1

PEiD/msvcr70.dll

windows7-x64

3

PEiD/msvcr70.dll

windows10-2004-x64

3

PEiD/plugi...ck.dll

windows7-x64

7

PEiD/plugi...ck.dll

windows10-2004-x64

7

PEiD/plugi...an.dll

windows7-x64

1

PEiD/plugi...an.dll

windows10-2004-x64

1

PEiD/plugi....0.dll

windows7-x64

1

PEiD/plugi....0.dll

windows10-2004-x64

7

PEiD/plugi...ay.dll

windows7-x64

7

PEiD/plugi...ay.dll

windows10-2004-x64

7

PEiD/plugi...ay.dll

windows7-x64

1

PEiD/plugi...ay.dll

windows10-2004-x64

1

PEiD/plugins/FC.dll

windows7-x64

1

PEiD/plugins/FC.dll

windows10-2004-x64

1

PEiD/plugins/FNE.dll

windows7-x64

1

PEiD/plugins/FNE.dll

windows10-2004-x64

1

PEiD/plugi...��.dll

windows7-x64

7

PEiD/plugi...��.dll

windows10-2004-x64

7

PEiD/plugi...fo.dll

windows7-x64

1

PEiD/plugi...fo.dll

windows10-2004-x64

3

PEiD/plugi...RC.dll

windows7-x64

1

PEiD/plugi...RC.dll

windows10-2004-x64

1

PEiD/plugins/GUID.dll

windows7-x64

7

PEiD/plugins/GUID.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a5282fbcecaf4a1a210c2307cc93ca1_JaffaCakes118

  • Size

    4.5MB

  • MD5

    3a5282fbcecaf4a1a210c2307cc93ca1

  • SHA1

    d7202927997152d2c4e645735d6c9b087d93a375

  • SHA256

    2a6002a45627c95d89658449464cde40b4293b3ef9e2da81dabb9383167f3669

  • SHA512

    0c07d2f71fd181d80833b3a9f29b598a415e4a443bf33af220d3b323bc2c82b0b8207d79ae807823523d5ff997d4f931e1f74e2da14df11fd89bbd30828f5ee8

  • SSDEEP

    98304:9zgjas3M4hBCEsIJfCzdeibN5PQMRqpmCFWn1Gl30HpFccePAadQS:pgjn9hB8IMZeqPQRmb1I3KpFdeAa

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 25 IoCs

    Detects file using ACProtect software.

  • UPX packed file 11 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 87 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a5282fbcecaf4a1a210c2307cc93ca1_JaffaCakes118
    .rar
  • PEiD/IDToText.Ini
  • PEiD/Info_mix.txt
  • PEiD/PESniffer.dll
    .dll windows:4 windows x86 arch:x86

    2b2b794f13fd8c667d8ca834996748b2


    Headers

    Imports

    Exports

    Sections

  • PEiD/PEiD_V0.95_Win7 版.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • PEiD/PEiD_V0.95_XP 版.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • PEiD/Signs.txt
  • PEiD/kanal.txt
  • PEiD/mfc70.dll
    .dll windows:4 windows x86 arch:x86

    8a5c122c59f95844abbafb18bb75e01a


    Headers

    Imports

    Sections

  • PEiD/msvcr70.dll
    .dll windows:4 windows x86 arch:x86

    1042bb30696d4426da7447f341f51a6e


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/AntiSPack.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/EPScan.dll
    .dll windows:4 windows x86 arch:x86

    c666e5e72f0ab836193a6ecc9d4651fa


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/Easy Screen 1.3.0.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PEiD/plugins/ExtOverlay.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PEiD/plugins/ExtractOverlay.dll
    .dll windows:4 windows x86 arch:x86

    18224f0023c1d4b8fa5366890ace8d1b


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/FC.DLL
    .dll windows:4 windows x86 arch:x86

    4a0fdd279b8201c411640750f3c864a9


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/FNE.dll
    .dll windows:4 windows x86 arch:x86

    c5be17924c06c50e992232655d664483


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/FSG v1.33脱壳.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PEiD/plugins/FileInfo.dll
    .dll windows:4 windows x86 arch:x86

    d6a022763f44013440a820232d928b0b


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/FixCRC.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/GUID.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PEiD/plugins/GenOEP.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/HideCapt.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/HideCapt2.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/IDToText.DLL
    .dll windows:4 windows x86 arch:x86

    74f2151033d553413b34e839e1eae537


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/ImpREC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/Imploder.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/Morphine.DLL
    .dll windows:4 windows x86 arch:x86

    65aedc289dc5a94502ea375e6866e085


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/Overlay1.0.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/Overlay1.0汉化.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/Oversaver.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/PE2HTML.dll
    .dll windows:4 windows x86 arch:x86

    0fe9fc740a71cc0e21fb2aeb0606bfde


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/PE2HTML.exe
    .exe windows:4 windows x86 arch:x86

    05881e9b42764fe73c81e0c6d8b7878e


    Headers

    Imports

    Sections

  • PEiD/plugins/PEExtract.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/PESniffer4PEiD.ASM
  • PEiD/plugins/PESniffer4PEiD.DLL
    .dll windows:1 windows x86 arch:x86

    48c1bd74255beeddd44ca6a38cbc8f52


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/PEiDBundle.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/PackUPX.DLL
    .dll windows:4 windows x86 arch:x86

    6e6d9f5d16fd7b203829bb9be3d442ca


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/Patch_Maker_0.5.0.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/Patch_Maker_0.5.0.dll.BAK
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/Patch_Maker_0.5.0.dll.u.txt
  • PEiD/plugins/Patch_Maker_0.5.0.dll33.bak
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PEiD/plugins/PlgLdr.dll
    .dll windows:4 windows x86 arch:x86

    b32ef6de36824c94b07dbadd3b22887d


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/PluginEx.dll
    .dll windows:4 windows x86 arch:x86

    1109abdbf41a656328ec6e240c11f456


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/QuickChSum.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/RebuildPE.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/RelocRebuilder.dll
    .dll windows:4 windows x86 arch:x86

    e52f56643e6da6cbdb1c93f0b70c77c0


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/SecFix.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/SecTool.DLL
    .dll windows:4 windows x86 arch:x86

    c3faa27f68df446fc4be4d8197124acf


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/Sendspy.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/StringViewer.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • PEiD/plugins/UNUPX.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UPXI.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UPXScramb.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UnCDS_SS.DLL
    .dll windows:4 windows x86 arch:x86

    74f2151033d553413b34e839e1eae537


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/UnFakeNinja.DLL
    .dll windows:4 windows x86 arch:x86

    74f2151033d553413b34e839e1eae537


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/UnPPP.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UnRCrypt.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UnRPolyCrypt.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UnUPXShit.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UnUPolyX.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/UnitsBrowser.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/VerA.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/VerA.txt
  • PEiD/plugins/XNResourceEditor_Plugin.DLL
    .dll windows:4 windows x86 arch:x86

    d8db0b791801ed624296ca19d27a7875


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/XP.dll
    .dll windows:4 windows x86 arch:x86

    d6cf6ca95c5d798fd40e32085cf5ee74


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/YPP.DLL
    .dll windows:4 windows x86 arch:x86

    4a0fdd279b8201c411640750f3c864a9


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/ZDRx.dll
    .dll windows:4 windows x86 arch:x86

    d4c1f10055794b70836a7d425f419308


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/[-=About PEiD =-]/UnreaL.DLL
    .dll windows:4 windows x86 arch:x86

    e07e00e45407ff0dd6abc9eaa981fa7b


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/advanced_scan.dll
    .dll windows:4 windows x86 arch:x86

    a5d8959922988908e51a62a998a351db


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/crc32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/eCrap.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/eCrapOepVerify.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/frant.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/hh.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/kanal.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/oepscan.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/ohfixer_v01.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/pluzina.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/pluzina1.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/pluzina4.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/pluziny.nfo
  • PEiD/plugins/unbero.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/undef.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/unfsg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/plugins/unupx2.dll
    .dll windows:4 windows x86 arch:x86

    95cb3600ce8c2399c0eeca761590692a


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/uupx.dll
    .dll windows:4 windows x86 arch:x86

    084efa91d7cd1e56b376370bf02ad0e3


    Headers

    Imports

    Exports

    Sections

  • PEiD/plugins/ypp.ini
  • PEiD/pluginsdk/NULL.dll
    .dll windows:4 windows x86 arch:x86

    e07e00e45407ff0dd6abc9eaa981fa7b


    Headers

    Imports

    Exports

    Sections

  • PEiD/pluginsdk/defs.h
  • PEiD/pluginsdk/null.c
  • PEiD/rtl70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/userdb.txt
  • PEiD/vcl70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEiD/xInfo.TXT
  • PEiD/飘荡软件.url
    .url