General

  • Target

    658e8407e9f68028acd01f749fae5fdd_JaffaCakes118

  • Size

    1.5MB

  • MD5

    658e8407e9f68028acd01f749fae5fdd

  • SHA1

    b6bb04659551ca77a5174ee0f34d51d9dc56e635

  • SHA256

    1a0b08df8b00187140cba1f2643cfcd5b912b1fd91249064d1fc7320759f88e7

  • SHA512

    1b0b0271fb4b80df957f03ed0d637cc7ffb458b8a233d45c6e9fc0456cdfeabe8ee4d34681d7886d4f4cbf59913a6c91db91c95415076510d6fd035903a9477d

  • SSDEEP

    24576:xaTstd4Y2e+WA6KOGGeRY2lrWE/eNZ+8+THJr+PD7RhgqkvjE1zabQgNMlIOtuoM:wTWQ3OGGeN/KPdhzabQgNMlDtuF52E

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 658e8407e9f68028acd01f749fae5fdd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/TeamViewer/Version4/TeamViewer_.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    42bb3280d840d5e9acd666bdd5d0c030


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    add11ce79d4925abda7b305cc53287d2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2457671c10c5aa708d9619798ec0139c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    6bc108eed3ca99f68adee56e9c99fac6


    Headers

    Imports

    Exports

    Sections

  • $TEMP/TeamViewer/Version4/SAS.exe
    .exe windows:4 windows x86 arch:x86

    14bdb3629883611a89edd699bc1a5043


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/TeamViewer/Version4/TV.dll
    .dll windows:4 windows x86 arch:x86

    fea01898dc44865ce5c8fa9d45170f69


    Headers

    Imports

    Exports

    Sections

  • $TEMP/TeamViewer/Version4/TeamViewer.exe
    .exe windows:4 windows x86 arch:x86

    474627dc58caac9d49a28fbb2d5d0467


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/TeamViewer/Version4/TeamViewer_Service.exe
    .exe windows:4 windows x86 arch:x86

    45db500bcd9747c2cc0b9138686b22ae


    Code Sign

    Headers

    Imports

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections