General

  • Target

    45dd116e52fb1392286d3eb314f6acd1_JaffaCakes118

  • Size

    1.2MB

  • MD5

    45dd116e52fb1392286d3eb314f6acd1

  • SHA1

    d758492f1daa1abf4c2487cb15e7a2c597577001

  • SHA256

    3c0ad5ebd56e8f848469e5582af02388be4c98d3b34403c21d900112ed23a71b

  • SHA512

    cf81a384c32be82e81cdcd5e15830f60c879e1d7a7e56a55b2a4b77d84da7eb4fd42e27b37fa008c8bc1e0c7b0e002d1c555c7ff4ac898419b61a1f5a216074c

  • SSDEEP

    24576:E0X2vzptbfKL1oX1Y5wrrRsrW7RdYxMn4iuKbQaqfQN+Qfsq7:1Gvz5Xa0Nsr4Qx64qfqqB0q7

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 45dd116e52fb1392286d3eb314f6acd1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    6b7d154c806f1e47db325229c300c6df


    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/ExentCtlInstaller.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $TEMP/SDM143/Free Ride Games.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/SDM143/Splash/loader1.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader2.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader3.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader4.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader5.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader6.jpg
    .jpg
  • $TEMP/SDM143/Splasher.dll
    .dll windows:5 windows x86 arch:x86

    8926e573f4b66cfe7558e5db5a6688aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/cmhelper.exe
    .exe windows:4 windows x86 arch:x86

    f5c5d75dcb7ff0affa88aae192f72bf4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/SDM143/resourceDll.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections