General

  • Target

    691f1c48f60aee01df1fe0d10e5599f8_JaffaCakes118

  • Size

    16.6MB

  • MD5

    691f1c48f60aee01df1fe0d10e5599f8

  • SHA1

    f557adc500c550f759d697aeca1dd0ba0eaf6c82

  • SHA256

    0a6180189e4f5911e0bdf60d52fa85a31cf1f6a55625b3bb17d066e07a1a4705

  • SHA512

    f14a0edebd52b242a5e3979fbaf19366aa7ab424a9d09fc1ff4453614b3fd8ac66b274ab2d50c47cc301ff5cf6b55a3d28409be942fca9c1f174bf24fbae3efd

  • SSDEEP

    393216:A0a099MyS4iWrpMq0fdrSnIOETHwNcbwcLWMpksNKaXlkFXB:AUjMyhrpodrCwjRbwcTpzNXl8

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • 691f1c48f60aee01df1fe0d10e5599f8_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/Carambis/Driver Updater/data/lang/crashrpt_lang_DE.ini
  • $APPDATA/Carambis/Driver Updater/data/lang/crashrpt_lang_EN.ini
  • $APPDATA/Carambis/Driver Updater/data/lang/crashrpt_lang_ES.ini
  • $APPDATA/Carambis/Driver Updater/data/lang/crashrpt_lang_FR.ini
  • $APPDATA/Carambis/Driver Updater/data/lang/crashrpt_lang_IT.ini
  • $APPDATA/Carambis/Driver Updater/data/lang/crashrpt_lang_JP.ini
  • $APPDATA/Carambis/Driver Updater/data/lang/crashrpt_lang_RU.ini
  • $PLUGINSDIR/ElevatePrivileges.dll
    .dll windows:5 windows x86 arch:x86

    47fda6a58e505d04d9a4fa8b292bae67


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Registry.dll
    .dll windows:5 windows x86 arch:x86

    0c4ab0a88a7d1d5d2bec9bf180354b2f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SaveInExe.dll
    .dll windows:5 windows x86 arch:x86

    b8998bc7a2067cbf38d42e3697f68613


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    735e27ae3d7df8c0487e4353d04f6f28


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installer_translate.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Yandex.exe
    .exe windows:5 windows x86 arch:x86

    dc71d141e0c9ebb2fb28b0c0dd33fd26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/downloader.exe
    .exe windows:5 windows x86 arch:x86

    a05d88650e5594db2afe874ec2674b55


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/list-bullet.bmp
  • $TEMP/screenshot-image.bmp
  • $TEMP/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/welcome.bmp
  • $TEMP/yandex_icon.bmp
  • CrashRpt.dll
    .dll windows:5 windows x86 arch:x86

    1f8655445843e343901ef718bdb576a1


    Headers

    Imports

    Exports

    Sections

  • CrashSender.exe
    .exe windows:5 windows x86 arch:x86

    03ca9d6e4bdcfe81d47bf3f764fe53ca


    Headers

    Imports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    94edee571d3a6c3103264e81c1452c8a


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    665a7203ee328c8774e946b947bd499e


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    51d391f74bdd44264db9d63f1a545d8d


    Headers

    Imports

    Exports

    Sections

  • QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    fd3bdea7e60f42da632f9afe3b5b5362


    Headers

    Imports

    Exports

    Sections

  • Win32/Installer.exe
    .exe windows:5 windows x86 arch:x86

    a69fcaa718e6eb3a97dc264a68883de4


    Code Sign

    Headers

    Imports

    Sections

  • dbghelp.dll
    .dll windows:6 windows x86 arch:x86

    3f5a00ef2a36f3cd8924690a5a1d6f3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dupdater.exe
    .exe windows:5 windows x86 arch:x86

    14988c6660dcabeb97f09069614c3d64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • htmlayout.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    234648628dd4c8af896510b5a1ee61eb


    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:5 windows x86 arch:x86

    db4f7798c644557a8e83b722a78c554f


    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    8f086f5a32e509badf2f96c155b50030


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ElevatePrivileges.dll
    .dll windows:5 windows x86 arch:x86

    47fda6a58e505d04d9a4fa8b292bae67


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installer_translate.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • x64/Installer.exe
    .exe windows:5 windows x64 arch:x64

    c1820fc98af898984b40e303de3c3e66


    Code Sign

    Headers

    Imports

    Sections