General

  • Target

    5ef16ac61fec98777567341965b1c0ed_JaffaCakes118

  • Size

    11.6MB

  • MD5

    5ef16ac61fec98777567341965b1c0ed

  • SHA1

    99249baae6baf9ccc5590cd19908b2ee2d55893d

  • SHA256

    d415bca3d253fa15786d33e4969c61375781147af42fe39f64bedfeb733d5e43

  • SHA512

    f9c13c774bcd6aa0654d451fb843b028f58b05dc586fad4fe96e6a5904400a37635db857763f469f3c0058de14f023159ff673791177867833a8d5514f6dcc86

  • SSDEEP

    196608:5YmC0twM7CBevBm2dez4GhvlOcXDNtub14FQob+9n35CkErTK0qybQ6Wz3+3C/K:q4J2OBm2d8VlH3ub1eQLiTKGWz+3CS

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ef16ac61fec98777567341965b1c0ed_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BtmImg.bmp
  • $PLUGINSDIR/FP_AX_CAB_INSTALLER64.exe
    .exe windows:5 windows x86 arch:x86

    843d987be462af4b31fef46a49ea7204


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Header.bmp
  • $PLUGINSDIR/LeftImg.bmp
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:5 windows x86 arch:x86

    6b9d096578bad49648d82fb5a245a197


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Rfshdktp.dll
    .dll windows:4 windows x86 arch:x86

    042f3c184e7c0923b6325ab1dc09aed7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ScrollBarImg.bmp
  • $PLUGINSDIR/SkinnedControls.dll
    .dll windows:5 windows x86 arch:x86

    0b5ebf524f3364a6e46fa57d8d2ff79c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:5 windows x86 arch:x86

    96b1473ae2c35072eabdf1009277c4fb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/banner_v40.bmp
  • $PLUGINSDIR/default.ini
  • $PLUGINSDIR/installing1_v40.bmp
  • $PLUGINSDIR/installing2_v40.bmp
  • $PLUGINSDIR/installing3_v40.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/setup_welcome_v40.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_56_.exe
    .exe windows:5 windows x86 arch:x86

    30847fe5521690f49dddc9ee5ed353d0


    Headers

    Imports

    Sections

  • YoukuAgent.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • YoukuDesktop.exe
    .exe windows:4 windows x86 arch:x86

    dcf0b9f9859e6e39859e8b88a5798fd1


    Code Sign

    Headers

    Imports

    Sections

  • YoukuMediaCenter.exe
    .exe windows:4 windows x86 arch:x86

    ff29a89809fb8c57dd10323bb81e041c


    Code Sign

    Headers

    Imports

    Sections

  • aapt.exe
    .exe windows:4 windows x86 arch:x86

    6cae795410282b03a8c84b120ba75b69


    Headers

    Imports

    Sections

  • adb.exe
    .exe windows:4 windows x86 arch:x86

    e16d22097e3080c933d4edd906a052e9


    Headers

    Imports

    Exports

    Sections

  • controller.dll
    .dll windows:4 windows x86 arch:x86

    8d6b701de5f08bef15561e32ad6edf72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.exe
    .exe windows:4 windows x86 arch:x86

    aff8bb9d64707a215deac17804c05a5b


    Headers

    Imports

    Sections

  • guide.swf
  • hao123-src=10016004_hao-.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ikuacc.dll
    .dll windows:4 windows x86 arch:x86

    785dcc7eb88eddc71d2293b099d58c19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ikutm.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ikutmco.dll
    .dll windows:4 windows x86 arch:x86

    4eb3de6604ea58926a35880b1f004020


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • insa64.exe
    .exe windows:6 windows x64 arch:x64

    3eacb9638877275335da4b58e52824f8


    Code Sign

    Headers

    Imports

    Sections

  • insi64.exe
  • inst32.exe
    .exe windows:6 windows x86 arch:x86

    3ab7cc62e4963955ad408cd420cd8ef1


    Code Sign

    Headers

    Imports

    Sections

  • libmp3lame-0.dll
    .dll windows:4 windows x86 arch:x86

    3aec5b220cfae7bc000883cb7dbdadda


    Headers

    Imports

    Exports

    Sections

  • swfc.dll
    .dll windows:4 windows x86 arch:x86

    1fad120ca6d85961b1c5cf8972aff637


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BtmImg.bmp
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Header.bmp
  • $PLUGINSDIR/LeftImg.bmp
  • $PLUGINSDIR/Rfshdktp.dll
    .dll windows:4 windows x86 arch:x86

    042f3c184e7c0923b6325ab1dc09aed7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ScrollBarImg.bmp
  • $PLUGINSDIR/SkinnedControls.dll
    .dll windows:5 windows x86 arch:x86

    0b5ebf524f3364a6e46fa57d8d2ff79c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:5 windows x86 arch:x86

    96b1473ae2c35072eabdf1009277c4fb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/banner_v40.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installing1_v40.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections