General

  • Target

    71f6c09993c1424d1c158d88ca3208c9_JaffaCakes118

  • Size

    1.4MB

  • MD5

    71f6c09993c1424d1c158d88ca3208c9

  • SHA1

    de5c18caed10b4c4fddd3aedd2f2b415c96c7d7a

  • SHA256

    1581fc6cbc0036f3a2db93600237bd9865f347ea1e3f0aca376bc8744d0e3817

  • SHA512

    3d214ec1883e0fd86e4093493575897a14c991ba8f26d74c2a4fefd08a722c2bb08833cc9dabe44c932b06c8033eb4f411b9dd6208059f7cc06d7c07e963419f

  • SSDEEP

    24576:L2KqYz3utEROE3cvWt9xkAzb8cQlE++NHXYNoPfS/:pD/OKc4xXz6F+iNoC/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 71f6c09993c1424d1c158d88ca3208c9_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Ask_Logo.bmp
  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    149adf074d317fbf0d2f17314bd18969


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ask_eula.rtf
    .rtf
  • $PLUGINSDIR/banner.bmp
  • $PLUGINSDIR/banner_chrome.bmp
  • $PLUGINSDIR/banner_chrome_36.bmp
  • $PLUGINSDIR/banner_ff.bmp
  • $PLUGINSDIR/banner_ie.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisXML.dll
    .dll windows:4 windows x86 arch:x86

    1156b4dd8fa8f1d42696b7a2d5b3e139


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/apphelp.dll
    .dll windows:5 windows x86 arch:x86

    a67f45b2e1e209d365ca7136c58ff087


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R1/$_1_/license.txt
  • $R1/$_1_/soffer.dll
    .dll windows:5 windows x86 arch:x86

    ec7f08258a6e85455901e00bbb9a8ccf


    Code Sign

    Headers

    Imports

    Exports

    Sections