General

  • Target

    602984a33503e83cbf18dd14cbb1a5ea_JaffaCakes118

  • Size

    22.9MB

  • MD5

    602984a33503e83cbf18dd14cbb1a5ea

  • SHA1

    72d2b30ef207ffa9d7b85bb81c877bd8ed285930

  • SHA256

    e0ab6ef803903b6866fb2dcddf7352e06fedc088a2b8314f7829cc9f83f2a22e

  • SHA512

    f269950e9402d5dbec337f32c68ba33d6b62a19b0d2f78e037b5d4c2343ff4a130fb4607090f4e3f6909f98485fa0582e6f0835591682f223582af32b761191e

  • SSDEEP

    393216:1wEZQPeotULkt4rzM8g0WDYfv/kpAyLNmMBhvlMgZaiLKqQ:1DQPeotarg+v34Nda/qQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 49 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 602984a33503e83cbf18dd14cbb1a5ea_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/Blueberry Software/$R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    abb427e843de9822b23c5087ef2fcada


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/Blueberry Software/$R2/NSIS.Library.RegTool.v3.$_81_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • $COMMONFILES/Blueberry Software/BandLoader.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    abb427e843de9822b23c5087ef2fcada


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/links.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    c2041581dd7ad52106a910a20f5ca604


    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_81_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • 1041/LogSysServer.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ActiveBand.bpl
    .dll windows:4 windows x86 arch:x86

    d2a783b7630f90f7b2d227006bc7d962


    Headers

    Imports

    Exports

    Sections

  • BBBR-FlashBack Express 5 (Japanese).xml
    .xml
  • BBIPP.dll
    .dll windows:4 windows x86 arch:x86

    42ffbc6544eaccf468adcbef4ede7731


    Headers

    Imports

    Exports

    Sections

  • CheckForUpdate.dll
    .dll windows:4 windows x86 arch:x86

    b43e4b843ab1bd8bc0a72cefe945dae6


    Headers

    Imports

    Exports

    Sections

  • FBFields.xml
    .xml
  • FLVScreenVideo.dll
    .dll windows:5 windows x86 arch:x86

    15c832b71ab4ab6c4d3b07ae145ac849


    Headers

    Imports

    Exports

    Sections

  • FlashBackDriverInstaller.exe
    .exe windows:4 windows x86 arch:x86

    de89efa4568c811105fecd645dfa0365


    Headers

    Imports

    Exports

    Sections

  • FlashBackInstall.dll
    .dll windows:4 windows x86 arch:x86

    b996dad25d861403d99a4eb614fc2311


    Headers

    Imports

    Exports

    Sections

  • GDI2MpegConverter.exe
    .exe windows:4 windows x86 arch:x86

    b704fd23f171ae22d209ab62106ea18b


    Headers

    Imports

    Exports

    Sections

  • LOGSYSINFO.HLP
  • LibAVEncoder.dll
    .dll windows:4 windows x86 arch:x86

    deef419e78370ae53574824658ece298


    Headers

    Imports

    Exports

    Sections

  • Licence.rtf
    .rtf
  • LogSysInstaller.dll
    .dll windows:4 windows x86 arch:x86

    6b38228122b80641c0a66834838d1f9f


    Headers

    Imports

    Exports

    Sections

  • LogSysServer.exe
    .exe windows:4 windows x86 arch:x86

    ee8069f29c2926e9f3f5f9df7674a86b


    Code Sign

    Headers

    Imports

    Sections

  • LogSysUploadCenterClient.dll
    .dll windows:4 windows x86 arch:x86

    8803e3feeff24ab5702d3cb7398d02ae


    Headers

    Imports

    Exports

    Sections

  • OpenH264Lib.dll
    .dll windows:4 windows x86 arch:x86

    f17887be128c42fef0de235ca732caa4


    Headers

    Imports

    Exports

    Sections

  • PredefinedGallery.dat
  • Readme.htm
    .html
  • RecorderChecker.exe
    .exe windows:5 windows x86 arch:x86

    231c054123904ded8b51f0f7b5f46d2f


    Headers

    Imports

    Sections

  • RunNonElevated.exe
    .exe windows:5 windows x86 arch:x86

    0fd25fbac2998aef43f5c8cc7e432714


    Code Sign

    Headers

    Imports

    Sections

  • RunNonElevated64.exe
    .exe windows:5 windows x64 arch:x64

    a6a3a69fdcb933b4cab71055e92cadb2


    Code Sign

    Headers

    Imports

    Sections

  • SSEUtils.dll
    .dll windows:5 windows x86 arch:x86

    2e168f9fee36c65804acc85d4752ed9f


    Headers

    Imports

    Exports

    Sections

  • VE32.dll
    .dll windows:5 windows x86 arch:x86

    855a254e4e380c0bb2624a1d6d4fab8e


    Headers

    Imports

    Exports

    Sections

  • VE64.dll
    .dll windows:5 windows x64 arch:x64

    377bc368b105dad5b4fb75d654a303b2


    Headers

    Imports

    Exports

    Sections

  • Video2FLV.dll
    .dll windows:5 windows x86 arch:x86

    3c4e52f377e2b37252c1e0997197568a


    Headers

    Imports

    Exports

    Sections

  • VideoPlayers.txt
  • VistaCoreSoundAPIWrap.dll
    .dll windows:6 windows x86 arch:x86

    83ddcc232e3e30a8977b71f47bbe2806


    Headers

    Imports

    Exports

    Sections

  • VistaCoreSoundAPIWrap.pdb
  • WMIIntDll.dll
    .dll windows:4 windows x86 arch:x86

    5880fb2fbb2d4b2de7ad772593f1931a


    Headers

    Imports

    Exports

    Sections

  • WMVExport.dll
    .dll windows:5 windows x86 arch:x86

    d238185bc44a1db6551aa82c894c1482


    Headers

    Imports

    Exports

    Sections

  • WebCam.dll
    .dll windows:4 windows x86 arch:x86

    f4956ff5293ecfb234ed91e981786f35


    Headers

    Imports

    Exports

    Sections

  • XECompat.bpl
    .dll windows:4 windows x86 arch:x86

    63b81768d63f3242c4e02a0356deea7a


    Headers

    Imports

    Exports

    Sections

  • avcodec-52.dll
    .dll windows:4 windows x86 arch:x86

    2ab79ba1da9de6d5336f13250f5b2d18


    Headers

    Imports

    Exports

    Sections

  • avcore-0.dll
    .dll windows:4 windows x86 arch:x86

    69e7bd8fd7422513c66940faf63987ea


    Headers

    Imports

    Exports

    Sections

  • avformat-52.dll
    .dll windows:4 windows x86 arch:x86

    7779fe892227cb617388f7770cd2c75e


    Headers

    Imports

    Exports

    Sections

  • avutil-50.dll
    .dll windows:4 windows x86 arch:x86

    fdaf7721788a47054081f4e4f0b9279f


    Headers

    Imports

    Exports

    Sections

  • bcbie170.bpl
    .dll windows:4 windows x86 arch:x86

    b19e11adcd3ffc9549d7b95509379d1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • borlndmm.dll
    .dll windows:5 windows x86 arch:x86

    f604847a29a7374567db0291bb5695be


    Headers

    Imports

    Exports

    Sections

  • cc32120mt.dll
    .dll windows:4 windows x86 arch:x86

    6dc63a2900fa5e32d9806997f606d03f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    3f5a00ef2a36f3cd8924690a5a1d6f3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbrtl170.bpl
    .dll windows:5 windows x86 arch:x86

    99cdb0a4a0fa332fe1d7a2985931dc37


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dsnap170.bpl
    .dll windows:5 windows x86 arch:x86

    e2927eb79a1e9892d2fbc605bd62b971


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inet170.bpl
    .dll windows:5 windows x86 arch:x86

    e9defd8ab0c367d585051cd5eb4f4df6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    d95d0819adcd198e02bdfa6dcf44972d


    Headers

    Imports

    Exports

    Sections

  • libiomp5md.dll
    .dll windows:4 windows x86 arch:x86

    42fbdef8d0a5a3a0cc1d9195fdc85f69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmfxaudiosw32.dll
    .dll windows:6 windows x86 arch:x86

    3c7d779d924d43c29d8da08c58116858


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libx264-128.dll
    .dll windows:4 windows x86 arch:x86

    d73912ae2398b719b56916badaadb7f8


    Headers

    Imports

    Exports

    Sections

  • mpglib.dll
    .dll windows:1 windows x86 arch:x86

    501d7ce4a5c78960b5129e99ab7104bd


    Headers

    Imports

    Exports

    Sections

  • review.xsl
    .xml
  • rtl170.bpl
    .dll windows:5 windows x86 arch:x86

    b32405c05b110c0e01d41ea8e181b0e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • soaprtl170.bpl
    .dll windows:5 windows x86 arch:x86

    6b4eabfd037862df98a662fd44a6ff29


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swscale-0.dll
    .dll windows:4 windows x86 arch:x86

    e6816285bf01d3eb17e23e762ca12de4


    Headers

    Imports

    Exports

    Sections

  • twolame.dll
    .dll windows:4 windows x86 arch:x86

    f94d0753a8f0a2de0b2e68286d372395


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • vcl170.bpl
    .dll windows:5 windows x86 arch:x86

    fa991216380000b5c0ce3943ac8d59cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vclactnband170.bpl
    .dll windows:5 windows x86 arch:x86

    588f3b44d6f1ec486f51e6a310e0ef7a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vclie170.bpl
    .dll windows:5 windows x86 arch:x86

    6544edc54b30193e1cb8e091747d5691


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vclimg170.bpl
    .dll windows:5 windows x86 arch:x86

    73a06b1eebca3ad74d6d3980e637002a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vclx170.bpl
    .dll windows:5 windows x86 arch:x86

    30bb38084d04e6f6b76d63cbcacfcc66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • welsenc.cfg
  • welslayer.cfg
  • xmlrtl170.bpl
    .dll windows:5 windows x86 arch:x86

    cf596b1361a8a91b0a8a8e81d4659413


    Code Sign

    Headers

    Imports

    Exports

    Sections