General

  • Target

    3e7141daaab3bda1c14d18fad2e079cc_JaffaCakes118

  • Size

    10.9MB

  • MD5

    3e7141daaab3bda1c14d18fad2e079cc

  • SHA1

    39dce1049f33ebb91708f0d17a72b1e663be11b8

  • SHA256

    cfbcf1b4d70310f33d6bcae550ef0ffc06b37275658ea8268cd59df8a3fd181f

  • SHA512

    02e69f839ed36af2afaab88f74aa45b41acee71887d234993deefd1255d4ad9952ceeaeecac22a5ac787349b34ce721a5a3734cf81d865e7f6a6750985a6b494

  • SSDEEP

    196608:TVAqX0dbBBkRIsm7AbbPMTRogRrXJQzEcy9Q73l8OuuLm71pC+GIMtPwuqsn:T6vb/17AbQ1o0rKbJmJpCdv5qsn

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 39 IoCs

    Detects file using ACProtect software.

  • UPX packed file 47 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 102 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3e7141daaab3bda1c14d18fad2e079cc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • Admin_BD.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/ARGOX/232_Read.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/ARGOX/communication.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/ARGOX/dlookup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/ARGOX/koncept.ini
  • BIN/ARGOX/ptprotocol.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/CP8200/232_read.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/CP8200/DLookup.exe
    .exe windows:5 windows x86 arch:x86

    dce88d72bc93e57fb84003e415f0a9da


    Headers

    Imports

    Sections

  • BIN/PtCmu.dll
    .dll windows:4 windows x86 arch:x86

    70811b15b817fccd266016672922f952


    Headers

    Imports

    Exports

    Sections

  • BIN/PtComm.exe
    .exe windows:4 windows x86 arch:x86

    fcd8aa3f44dccb34991925f8569be19e


    Headers

    Imports

    Sections

  • BIN/PtcMdm.dll
    .dll windows:4 windows x86 arch:x86

    9d78b9b7cfde07fda1b5fc3984d9ae61


    Headers

    Imports

    Exports

    Sections

  • BIN/clcomn.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/clmfcx.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/cp8300/232_read.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/cp8300/DLookup.exe
    .exe windows:5 windows x86 arch:x86

    dce88d72bc93e57fb84003e415f0a9da


    Headers

    Imports

    Sections

  • BIN/cp8300/Data_Read.exe
    .exe windows:4 windows x86 arch:x86

    188bd2ed243c3c1e03b53e1c4018cd46


    Headers

    Imports

    Sections

  • BIN/cp8300/IR_Read.exe
    .exe windows:4 windows x86 arch:x86

    29c8a8050f716e36d5e6d875a55d7640


    Headers

    Imports

    Sections

  • BIN/cp8300/dlookup711.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BIN/cp8300/koncept.ini
  • BIN/ezJobConv.Dll
    .dll windows:4 windows x86 arch:x86

    9a8be116fbf9861a7b2e87799f5b3420


    Headers

    Imports

    Exports

    Sections

  • DANE/BAZA.GDB
  • Data_Read.exe
    .exe windows:4 windows x86 arch:x86

    5e36dc39e34a9ac238aab6108b705829


    Headers

    Imports

    Sections

  • Data_read.ini
  • DosCommand.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • GJLSoftwareD7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • IBO40CRT_D7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • IBO40XRT_D7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • LIB/Dll_CSV.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • LIB/Dll_DBF.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PgCSVPack.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Symbol.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • UDF/FBFunkcje.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • UDF/fbudf.dll
    .dll windows:4 windows x86 arch:x86

    10fe74b0392964977d847d39aadfc947


    Headers

    Imports

    Exports

    Sections

  • UDF/fudlib.dll
    .dll windows:4 windows x86 arch:x86

    fdf3c234219ab644f3f6aa07a4b01546


    Headers

    Imports

    Exports

    Sections

  • UDF/ib_udf.dll
    .dll windows:4 windows x86 arch:x86

    bb43f038c5622667949e365110c686a3


    Headers

    Imports

    Exports

    Sections

  • UDF/rfunc.dll
    .dll windows:4 windows x86 arch:x86

    2164c66d8cb8a734effbe6a085d3b87a


    Headers

    Imports

    Exports

    Sections

  • VCLZipD7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • WebBrowserWithUIDpk70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bdConn.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bdertl70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • borlndmm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • convert.exe
    .exe windows:5 windows x86 arch:x86

    8bb51e7c524602c044cab41b4b24d32c


    Headers

    Imports

    Sections

  • dbrtl70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • dsnap70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • eho.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ehores.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • fbclient.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • firebird.conf
  • firebird.msg
  • gbak.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gds32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • gfix.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ib_util.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • icudt30.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • icuin30.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • icuuc30.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • impbd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • inet70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • isql.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • kolektor_download.exe
    .exe windows:4 windows x86 arch:x86

    4abd62715c483397f989e41d2bc1e541


    Headers

    Imports

    Sections

  • kolektor_upload.exe
    .exe windows:4 windows x86 arch:x86

    929ce26054af543feaed43f743646525


    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • locale/en/LC_MESSAGES/default.mo
  • locale/pl/LC_MESSAGES/default.mo
    .eml
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pkgAppRegOptions.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgConsts.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgDbgrid_store.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgHistDokHttp.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgHistZamHttp.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgImpZam.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgIndy.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgKosztorysant.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgOfertaHTTP.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgPlatnosciHTTP.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgSynchUtils.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgZamHttp.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pkgZmianyCen.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • png.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • qrpt70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • qtintf70.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • rtl70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • rxbde7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • rxctl7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • rxdb7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tdbf_d7r.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • uninst.exe.nsis
  • vcl70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vcldb70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vclie70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vcljpg70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vclsmp70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vclx70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • vcomp100.dll
    .dll windows:5 windows x86 arch:x86

    c80e49e03838330a5df1ad4a389497a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • visualclx70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • webservices.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wmiScripting.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • xmlrtl70.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • zasoby.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections