General

  • Target

    08820767eb8536e55abc1dba54e54e5b_JaffaCakes118

  • Size

    201KB

  • MD5

    08820767eb8536e55abc1dba54e54e5b

  • SHA1

    3f0be3f5ae2497fb6a58671d75143ca1d3d9eb75

  • SHA256

    3fa9219cabed146cda69d57721f2ae558e90b37dbb16b7d683e79449d254c6bb

  • SHA512

    b91ba74bb73a62eebd928f7ab912845eb5027791389ed8920b50f2c51f968a8f5f468a0b76bcafd14d10862aa3a6c925458692faa7b4c12ba97f1dea3adf9f7a

  • SSDEEP

    6144:M2e342PF175+ZPPfnE2Qyn20U4HEUPPSTSgmT:sHF+ZPPfnEUnuUnMS3T

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 08820767eb8536e55abc1dba54e54e5b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    ee75cece63794fa22feebed80a358b16


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • SideOh.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    70afa54f994ce577fdc9650feab90de1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SideOh.exe
    .exe windows:4 windows x86 arch:x86

    d52f9d9d194587a482c3976b441ddc5b


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe.nsis