Overview

overview

7

Static

static

7

THEME file...so.dll

windows7-x64

1

THEME file...so.dll

windows10-2004-x64

1

THEME file...le.dll

windows7-x64

1

THEME file...le.dll

windows10-2004-x64

1

THEME file...le.dll

windows7-x64

1

THEME file...le.dll

windows10-2004-x64

1

transparen...cy.exe

windows7-x64

7

transparen...cy.exe

windows10-2004-x64

7

uxtheme pa...er.exe

windows7-x64

7

uxtheme pa...er.exe

windows10-2004-x64

7

$PLUGINSDIR/Aero.dll

windows7-x64

7

$PLUGINSDIR/Aero.dll

windows10-2004-x64

7

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...le.dll

windows7-x64

3

$PLUGINSDI...le.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    849dd4e0cf0a57034e3ec855ed11b41f_JaffaCakes118

  • Size

    4.8MB

  • MD5

    849dd4e0cf0a57034e3ec855ed11b41f

  • SHA1

    0db7064134d4e6c7f94082ffec63a978ccf983a5

  • SHA256

    201d2e3454a2666f04cb212274de8e6d97a4630fd6a403023fcd963e89f63255

  • SHA512

    3336b14c3b726575dc19235f4d863c5e1fa378090203332c2c598c3384ac2c40e953945501a7921c3ea143ef17804c74dcb8234248440f55556d3d08e3aec5c7

  • SSDEEP

    98304:qQp8pLb7GUPbE7Tu/KANWb1Vu+vHYTp8MifToIYbW8eh8Xg/A:qQp8VWkE7eKANWLvHYTppgT5Y8hy9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 849dd4e0cf0a57034e3ec855ed11b41f_JaffaCakes118
    .rar
  • ReadME - installation and tips.txt
  • THEME files/Abisso.theme
  • THEME files/Abisso/Abisso.msstyles
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • THEME files/Abisso/Wall/1.jpg
    .jpg
  • THEME files/Abisso/Wall/Thumbs.db
  • THEME files/Abisso/shell/NormalColor/en-US/shellstyle.dll.mui
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • THEME files/Abisso/shell/NormalColor/shellstyle.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • changelog.txt
  • download modded sys files/Readme - download automatic file replacer.txt
  • preview.jpg
    .jpg
  • transparency for all windows and popups/Instructions.txt
  • transparency for all windows and popups/set-at-boot.reg
  • transparency for all windows and popups/suggested settings.jpg
    .jpg
  • transparency for all windows and popups/transparency/Read Me please.txt
  • transparency for all windows and popups/transparency/System Transparency.ex_
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • transparency for all windows and popups/transparency/close.png
    .png
  • transparency for all windows and popups/transparency/minimize.png
    .png
  • transparency for all windows and popups/transparency/top bar.png
    .png
  • transparency for all windows and popups/transparency/win7.png
    .png
  • transparency for all windows and popups/unset-at-boot.reg
  • uxtheme patch/Instructions.txt
  • uxtheme patch/UltraUXThemePatcher.ex_
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Aero.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFile.dll
    .dll windows:4 windows x86 arch:x86

    722b4c6354d0d74582e6b8b9621ef62c


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • uxtheme patch/if you don't want to change sys files.txt