General

  • Target

    b7d06f65564317c33b10d4a0252ee92e_JaffaCakes118

  • Size

    786KB

  • MD5

    b7d06f65564317c33b10d4a0252ee92e

  • SHA1

    5f8728533ff12ba254bcc74b862a6e39b6ed9308

  • SHA256

    06a1996672baa5f204d5fa57d4acd5da6f97f18ef5a97ea36fe470b5a2c73b58

  • SHA512

    3534d6808e3e5ed6c0a8cd49c3de55c61807e7a641715a28c4d9542b9e037ea00b809777bf9daa498a2ca46b9478dfbdb969ca79ac093205b7978bfbb687f098

  • SSDEEP

    12288:TxpJEQZiC2cO/Yms/fn+Z24zFwmG/m0tzobz0Nv1aZuhPVZK+Oyu2A93R84:tpa/c3R/PlKgQboNoZyS+tuN9/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b7d06f65564317c33b10d4a0252ee92e_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    c86b02c21ff392ad6ffcf21dcd4a5588


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvancedTests.lua
  • $PLUGINSDIR/BrowserControl.lua
    .js
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DownloadList.lua
    .js
  • $PLUGINSDIR/DownloadThread.lua
  • $PLUGINSDIR/Events.lua
  • $PLUGINSDIR/FloatingProgress.dll
    .dll windows:5 windows x86 arch:x86

    6ef0ba2a59a41ea0d58313176f4f9149


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GuiInit.lua
    .js
  • $PLUGINSDIR/IntegratedOffer.lua
  • $PLUGINSDIR/LuaBridge.dll
    .dll windows:5 windows x86 arch:x86

    d224073b022ad7f6039ec3ce0a091d35


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaSocket/lua/ltn12.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/mime.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/http.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
  • $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/url.lua
  • $PLUGINSDIR/LuaSocket/mime/core.dll
    .dll windows:4 windows x86 arch:x86

    fe8e49b45d854066bc51a41f61066908


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaSocket/socket/core.dll
    .dll windows:4 windows x86 arch:x86

    f7bb4b78321004f93f7e54fe50af1981


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaXml_lib.dll
    .dll windows:4 windows x86 arch:x86

    0e4b7cfc82eb1d2e2840274f1659b95a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NotifyIcon.dll
    .dll windows:5 windows x86 arch:x86

    e043e246d8abcbb9de2ad82c6e18cd88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UACInfo.dll
    .dll windows:5 windows x86 arch:x86

    0603f1e5036bb7e26cc82e7875b30a9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bit.dll
    .dll windows:5 windows x86 arch:x86

    c386ea6b5416735e46724de400d1557d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bundleinstall.lua
    .js
  • $PLUGINSDIR/callbackproxy.lua
    .js
  • $PLUGINSDIR/customNsWeb.dll
    .dll windows:5 windows x86 arch:x86

    c406b41faef9d450d598369f4d24e810


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/definitions.lua
    .js
  • $PLUGINSDIR/downloads.lua
    .js
  • $PLUGINSDIR/eagerinstall.lua
    .js
  • $PLUGINSDIR/env.lua
  • $PLUGINSDIR/extension.tlb
  • $PLUGINSDIR/ffi.dll
    .dll windows:5 windows x86 arch:x86

    49243da65777aa40d71712f25e529629


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/json.lua
  • $PLUGINSDIR/lua51.dll
    .dll windows:4 windows x86 arch:x86

    03897d00c9f26c4fa6b52b1c1b315d9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/luacom.dll
    .dll windows:4 windows x86 arch:x86

    5f56694ee532c8969e60878f914fcebd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/luaxml.lua
  • $PLUGINSDIR/notifyicon.lua
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    90eea478feb0667dcdd7bccb241e74b3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:5 windows x86 arch:x86

    4c04c20a976733bf789fead96eb58701


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/packaged_app.lua
    .js
  • $PLUGINSDIR/processfreefile.lua
  • $PLUGINSDIR/sandbox.lua
    .js
  • $PLUGINSDIR/scheduler.lua
    .js
  • $PLUGINSDIR/service_registry.lua
  • $PLUGINSDIR/skin/res/common.css
  • $PLUGINSDIR/skin/res/common.js
    .js
  • $PLUGINSDIR/skin/res/jquery.js
    .js
  • $PLUGINSDIR/skin/res/knockout.js
    .js
  • $PLUGINSDIR/uistate.lua
  • $PLUGINSDIR/un.package.exe
    .exe windows:5 windows x86 arch:x86

    35b698a6fd5038f719a27b089cb1f48e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/utils.lua
    .js
  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/win32_constants.lua
  • $PLUGINSDIR/wininet/compat.lua
    .js
  • $PLUGINSDIR/wininet/core.lua
    .js
  • $PLUGINSDIR/wininet/defs.lua
    .js
  • $PLUGINSDIR/wininet/ftp.lua
    .js
  • $PLUGINSDIR/wininet/http.lua
    .js
  • $PLUGINSDIR/wininet/ltn12.lua
    .js
  • $PLUGINSDIR/wininet/url.lua
  • $PLUGINSDIR/wininet/wininet_h.lua
  • $PLUGINSDIR/wininet/wintypes.lua