General

  • Target

    3b7478bebb828039c2a6034bacbd4821_JaffaCakes118

  • Size

    1.9MB

  • MD5

    3b7478bebb828039c2a6034bacbd4821

  • SHA1

    29d1775df0248dffdce21c655603eb57ff10b9e3

  • SHA256

    f13ee983f7b7f9f30fc383b1923438dec4915dbed94d829e267d2940edca09c7

  • SHA512

    c73726a8692d942b0ec38423dc8595521f8bfb91fbbea83e4d0614bc9ba4d0c695cf142e54e40b66382d47d3bb8f3b2bba1d6fb8085a41e6f08c9b63f8e9a0b5

  • SSDEEP

    49152:/vDGDaz61pBLNl7A5p9+TXZBqg2xTz/DXaI:3imS7A5idByzLXL

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b7478bebb828039c2a6034bacbd4821_JaffaCakes118
    .rar
  • Data/Config.ini
  • Data/Favorites.EDT
  • Data/Favorites.edb
  • Data/Reg.ini
  • Data/WebConfig.ini
  • Data/web.ini
  • Data/鼠标文件.cur
  • Important/DiDaGrid.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    f2c3a8ffe62eddb65323621d30a75f77


    Headers

    Imports

    Exports

    Sections

  • Important/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • UpDate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • WebBrowser.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • temp.EDT
  • temp.edb
  • 更新日志.txt
  • 精易编程助手.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections