General

  • Target

    6afdcb66e6dbda69c31eb5141319ad45_JaffaCakes118

  • Size

    595KB

  • MD5

    6afdcb66e6dbda69c31eb5141319ad45

  • SHA1

    90377c42d3389bd335474150ed281ecadba1fa7f

  • SHA256

    9a6daa518e4e6a4b42570a4e9902836bbb82109fa0d0a5174d8f921c422ce657

  • SHA512

    60c9ec34e851376f03b57e25cb2aad692f24f74ecff79b5a01fb202af5e38c45fa03bfae3fff42d334e0ba49d0e86d78fc735f45f41ea1b17d7125ca32d9f7c3

  • SSDEEP

    12288:JohZrs+ah8iC330SZHuakTBbs0BMje6jdJx1EoteB6kMk2eEiViQ5:JorrFkUU6Huakps0OjjboAlheZVB

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 6afdcb66e6dbda69c31eb5141319ad45_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/Aero.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/Delay.dll
    .dll windows:4 windows x86 arch:x86

    bb13ae3bcb238d1bf689a931b2a56cd6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WebCtrl.dll
    .dll windows:4 windows x86 arch:x86

    38afb22849145136919da4ca045e0de8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/desc.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    2e363db44011ed76701ec6ce62db36f5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/scroll.html
    .html
  • $PLUGINSDIR/tg_logo.gif
    .gif
  • $PLUGINSDIR/tr_data/cred.html
    .html
  • $PLUGINSDIR/tr_data/legal.html
    .html
  • $PLUGINSDIR/tr_files/scroll.dflt.js
  • $PLUGINSDIR/tr_files/scroll.html
    .js
  • $PLUGINSDIR/tr_files/scroll.js
    .js
  • $PLUGINSDIR/tr_files/scroll.tpl0.js
    .js
  • $PLUGINSDIR/tr_files/scroll0.css
  • $R0
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections