General

  • Target

    68c50dc1c768e94b6b851a02c65af6ec_JaffaCakes118

  • Size

    2.2MB

  • MD5

    68c50dc1c768e94b6b851a02c65af6ec

  • SHA1

    f98dacc59c8e8c6922e57e7c88fbb340bd69d5e9

  • SHA256

    3b74e3fce8352bb3a46555eb0f3aeafacee314dc05213e151d70f9bce8c0fc9c

  • SHA512

    c070bdbf379fb7cb7943d14ef882f6254e1793b3f23302b6df54ced793b5799a8bc3672e3454106c754c49754027ae1849d7f1484af42e02ad605a96048aaa62

  • SSDEEP

    49152:fCuUB3tGao2/X/LW8i9s6aHpJQPHKj+5Et+7NrhDeGKL9ZtO:1StGLyvLW2POmQi5ZtO

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 68c50dc1c768e94b6b851a02c65af6ec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    29b61e5a552b3a9bc00953de1c93be41


    Headers

    Imports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    5197e2b5d0b686a43ee5fcfc134f44d9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/x_pack0622_UK_AU.exe
    .exe windows:4 windows x86 arch:x86

    29b61e5a552b3a9bc00953de1c93be41


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MPCOnline_345_1.exe
    .exe windows:5 windows x86 arch:x86

    234fc10c364a84945638d1fdaa32191b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • DLBT.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MPCDownload.exe
    .exe windows:5 windows x86 arch:x86

    2f4ae927713a5ebddea2557d455d98a3


    Code Sign

    Headers

    Imports

    Sections

  • MPCSetup_4.torrent
  • Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.CRT/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Report.dll
    .dll windows:5 windows x86 arch:x86

    2fce30347c328267681dad8c59f588e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Support.dll
    .dll windows:5 windows x86 arch:x86

    95e052a3cd1d54b262840b53667722fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Utility.dll
    .dll windows:5 windows x86 arch:x86

    f67cae7d35b03fa8b3a9a1b7716757a3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p2pconfig.ini
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    8abe046ef411de4d3e6e831b6b1ee264


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tmp0.exe
    .exe windows:4 windows x86 arch:x86

    29b61e5a552b3a9bc00953de1c93be41


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    8abe046ef411de4d3e6e831b6b1ee264


    Headers

    Imports

    Exports

    Sections