General

  • Target

    3afea8a4364c8f67b7e8aeb268594241_JaffaCakes118

  • Size

    247KB

  • MD5

    3afea8a4364c8f67b7e8aeb268594241

  • SHA1

    40b55b77886c8b2d67417b423553e11be951ce70

  • SHA256

    244734d930d2852da1fb2e6a76803bf0d5ee07557e327d01f50f61fafe411a80

  • SHA512

    06ea6d48015587b8cd6fe41ba7eaff3242c1266d30737b402f4eaef745c302cf2124c66f938cb3086abdb160666bdec1871308b711a1705558c38ea9cf83e6d0

  • SSDEEP

    6144:rAQnIaoYabnhr1vuV2l3YsW/zG16T6LMDstPVkO6:1GPGV2l3YtLjGLMcVkn

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 3afea8a4364c8f67b7e8aeb268594241_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    2c9af842676b96750379e168992b2ead


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a576be1e9e1e488f8ee747d4b18fa7df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    389abcab5eb660264df56ed18f31520e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    4fb4d15e957b6564bf15c23e80f0202a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/360TS.jpg
    .jpg