General

  • Target

    685088059df439c545a69192df6f0a24_JaffaCakes118

  • Size

    20.7MB

  • MD5

    685088059df439c545a69192df6f0a24

  • SHA1

    0faa19415aca86d8e73259e62f6769282228184f

  • SHA256

    0f7ebec3a003cb94ed8c7c2b2c8e0b491da168ca044ed70e0f85288a4ae5272d

  • SHA512

    837eeb94ceae3eddd2b055fa80497b34fdaff983009b12b5a88b2c73dd0ee4068d07ffedae9493a576c684359a00036705275a32b73333ecebf9e0eb2a33f920

  • SSDEEP

    393216:20xA37N1U003P85MbaEjfldL8VJUBIin+zGiRvePSmdL52Xxc21h:20I/UV4UaUwVJq+zh9ePSS4Xu2/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 685088059df439c545a69192df6f0a24_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/Fileguri/DiskFileguri.ico
  • $APPDATA/Fileguri/Fileguri.ico
  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    24a4a671f5cc294ce3543d18a1e873cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    ed65ea42bcccddb8d50855aae69266f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_24_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • Ark32.dll
    .dll windows:5 windows x86 arch:x86

    bb0bc3e6d92c94be66f374a731e7f7b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ark32_v2.dll
    .dll windows:5 windows x86 arch:x86

    c04a32761b82ce14aa23ba289d6edae9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Ark32lgpl.dll
    .dll windows:5 windows x86 arch:x86

    213561b663826c12cff8d69c48cf7345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ArkZip32.dll
    .dll .pdf windows:5 windows x86 arch:x86 polyglot

    b86798315b7e15450e64c193548c0c9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCheck.dll
    .dll windows:4 windows x86 arch:x86

    3ccd7aeac3502efb4aa98f641179ddca


    Headers

    Imports

    Exports

    Sections

  • Check.exe
    .exe windows:5 windows x86 arch:x86

    eb87572b82b0ef7e2a2e96b03a50d6e9


    Code Sign

    Headers

    Imports

    Sections

  • FcLauncher.exe
    .exe windows:4 windows x86 arch:x86

    d99aa86b52c7a029e55e24c2c4fad79c


    Headers

    Imports

    Sections

  • FgHook.dll
    .dll windows:4 windows x86 arch:x86

    bdd43dbd3175776fe60cb1c66d5c0768


    Headers

    Imports

    Exports

    Sections

  • Fileguri.exe
    .exe windows:4 windows x86 arch:x86

    713bd30df4c5ce3537e58134687ec162


    Code Sign

    Headers

    Imports

    Sections

  • GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    68a82f89c3fde2fdb45bbeddb19a9697


    Headers

    Imports

    Exports

    Sections

  • MCheck.dll
    .dll windows:4 windows x86 arch:x86

    1ac7223910003e225ff5fe9ce6c9122a


    Headers

    Imports

    Exports

    Sections

  • MediaInfo.dll
    .dll windows:5 windows x86 arch:x86

    64f05548760ebfde5e1f166b124b8db1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MediaInfo_v2.dll
    .dll windows:4 windows x86 arch:x86

    9516debaeb501cc020b83265018f09ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mfilter.dll
    .dll windows:5 windows x86 arch:x86

    06c3be29433398a47f8d7248582d0ef8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.ATL.manifest
    .xml
  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • UNACEV2.DLL
    .dll windows:1 windows x86 arch:x86

    8390514c40641509cd0941c1fb7588ab


    Headers

    Imports

    Exports

    Sections

  • Uninst.exe.nsis
  • ZHashGen.dll
    .dll windows:4 windows x86 arch:x86

    8b111a4278cfac79c7f9378d33e27bd6


    Headers

    Imports

    Exports

    Sections

  • ZipArchive.dll
    .dll windows:4 windows x86 arch:x86

    e646ff77048c9eadab1c905d43fc7478


    Headers

    Imports

    Exports

    Sections

  • calMbc.dll
    .dll windows:4 windows x86 arch:x86

    83be0c2305f3dc645f80ef424342afe1


    Headers

    Imports

    Exports

    Sections

  • ckpcodec.dll
    .dll windows:4 windows x86 arch:x86

    77989818cc4a13d2cd77bfe05183ef25


    Headers

    Imports

    Exports

    Sections

  • conkeeper.dll
    .dll windows:5 windows x86 arch:x86

    9628f0e58909bbf12b0fa3d5eb9c1ecf


    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:4 windows x86 arch:x86

    39525b45c40c6c59481ed9e5dc908b2d


    Headers

    Imports

    Exports

    Sections

  • detect.exe
    .exe windows:5 windows x86 arch:x86

    bce2c5434e6542d41b4299029024fd74


    Code Sign

    Headers

    Imports

    Sections

  • detect_service.exe
    .exe windows:5 windows x86 arch:x86

    06df045f03c96a82f2cd1cb580261f3c


    Code Sign

    Headers

    Imports

    Sections

  • filegurimain.exe
    .exe windows:4 windows x86 arch:x86

    9e00a3f2d43bc4645abdb931b52c66dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nat.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • nat2.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • sfdcd.dll
    .exe windows:4 windows x86 arch:x86

    f741c204c6b516d49798cd018f5da657


    Headers

    Imports

    Sections

  • sffileguri.dll
    .dll windows:4 windows x86 arch:x86

    24762edf050822830443ea8985aba4ce


    Headers

    Imports

    Exports

    Sections

  • ssmfileinfo.dll
    .dll windows:4 windows x86 arch:x86

    36adf6a1423dacf01a70fbb863d71eb1


    Headers

    Imports

    Exports

    Sections

  • unace32.exe
    .exe windows:5 windows x86 arch:x86

    56bac85561f78132ca190bf57013fc88


    Code Sign

    Headers

    Imports

    Sections

  • xkcsdk_fg.dll
    .dll windows:4 windows x86 arch:x86

    293b78b217407b9a21cb08646168b0cd


    Code Sign

    Headers

    Imports

    Exports

    Sections