General

  • Target

    91dc1f908835e3efa644ce6018d4a016_JaffaCakes118

  • Size

    247KB

  • MD5

    91dc1f908835e3efa644ce6018d4a016

  • SHA1

    40247eb95a1ea7c6f146ab80b2d4c6c0056afa02

  • SHA256

    10864b7cf02dad44be4902f95f403f4f0f0073d11414575380144d5825bb351a

  • SHA512

    cbb5ca3f2cb4a5f13a0442b3a2aa327e89a9c83b318f35406341a79c936cc2d8c0233027008a5838d4bf4c619099ab565b879710cf9e1b25b142eb2eb7c45f3d

  • SSDEEP

    3072:/FXoDt6QAmP/NO4v4ZkxhJuADeK7iUiaYJQOQxYd23bA7dOq2uhErZtfl0/d/nuN:OAQnIaoYKKhaaYJkA23COr7ZDMFu44

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 91dc1f908835e3efa644ce6018d4a016_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    2c9af842676b96750379e168992b2ead


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    a576be1e9e1e488f8ee747d4b18fa7df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    389abcab5eb660264df56ed18f31520e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    4fb4d15e957b6564bf15c23e80f0202a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/360TS.jpg
    .jpg