General

  • Target

    abd4ebc7de524df7df09438534a2dd31_JaffaCakes118

  • Size

    1.4MB

  • MD5

    abd4ebc7de524df7df09438534a2dd31

  • SHA1

    c561cb219ed2fddae92cb4dfa63e6019d635882b

  • SHA256

    fc5a9a253ec58e8fe63a57230df75df18ae0971810f6ed8c37b1d56ba1a2addb

  • SHA512

    7091e30292dd775979196765ce67e657b8cf0fc8748e35708f892683019b238c9b43304b43fec582c827e339e2028a74e35d5c7e8b757f177238209001dca740

  • SSDEEP

    24576:gpLcN3sVMycDsnO9bcP3HWSEeio1JW3xGIOYvUFqJQF2rYiveP5yOd9SVMEr+z:gpdVMycon+i32YJWrvUF3AvEyW9SVME4

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • abd4ebc7de524df7df09438534a2dd31_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMP/UltraISO/UltraISO.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/UltraISO/drivers/ISODrive.sys
    .sys windows:5 windows x86 arch:x86

    92ceb94f309a340920bfdd2ca5a3b1c7


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/UltraISO/drivers/ISODrv64.sys
    .sys windows:5 windows x64 arch:x64

    ca96b7f2935e037ae9b674cc940efc40


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/UltraISO/drivers/IsoCmd.exe
    .exe windows:5 windows x86 arch:x86

    5d30fe8c13c8cfc987eeeaa6a0eddb98


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/UltraISO/drivers/bootpart.exe
    .exe windows:5 windows x86 arch:x86

    cf316e25eeca39dfcf28358629c34deb


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/UltraISO/drivers/bootpart.sys
    .sys windows:5 windows x86 arch:x86

    7106415a9b05d4b9cfc02293d39a9a38


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/UltraISO/drivers/bootpt64.sys
    .sys windows:5 windows x64 arch:x64

    447f1cd11f0211ba9fe52ce23371cafe


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/UltraISO/isoshell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7c74863037feb824f5529aae329b8db8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/UltraISO/isoshl64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    cbc1e923185663d97dcb6695ccfa95a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/UltraISO/lang/lang_cn.dll
    .dll windows:4 windows x86 arch:x86

    a760606a533af4814ef9283c1ca3b322


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/UltraISO/uikey.ini
  • $TEMP/UltraISO/ultraiso.ini