General

  • Target

    0ab7f58f1ed090c1b6fd050f8ed13048_JaffaCakes118

  • Size

    2.7MB

  • MD5

    0ab7f58f1ed090c1b6fd050f8ed13048

  • SHA1

    7fa9b8b864a80213a97730ca0ba0c729259274dc

  • SHA256

    f177aa03113004db41bbb0cd27da9f1caa2f609fce4e73114c3bf17fcc6abb88

  • SHA512

    e95ffea5ce5e2643ef3f0ac1cae2fbfbc6d58f3d6fa5b9ef7b80906fd3a274fedf2fb4c2c420a0a850b4adc39fbdb7058463864c66b18c30d809c331d15a18d6

  • SSDEEP

    49152:XwiR3R/nlO2mhA8Ix44DRQwQ25hYD6HtqC0nx6syCjODv8dwepsK061dqxC81p:5/n4hLIxJDRQt25hMC00sbpdwepsK9nS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 0ab7f58f1ed090c1b6fd050f8ed13048_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • BLOCK/BLOCK.DEF
  • BLOCK/BLOCKS.DBF
  • BLOCK/BLOCKS.cdx
  • BLOCK/BLOCKS.fpt
  • BLOCK/EAGLEDBF.DBF
  • BLOCK/EAGLEDBF.cdx
  • C4dll.dll
    .dll windows:4 windows x86 arch:x86

    0fbfc1794b70c4c57ad56ec18f642486


    Headers

    Imports

    Exports

    Sections

  • SYS/CONDITION.FUT
  • SYS/CONDITION.STK
  • SYS/FIELD.DB2
  • SYS/tod.txt
  • SkyCHT.dll
    .dll windows:4 windows x86 arch:x86

    d531528bc5bc2a81b2b6489ace1c11de


    Headers

    Imports

    Exports

    Sections

  • URL.txt
  • USERS/C.ini
  • USERS/C2.ini
  • USERS/C3.ini
  • USERS/PAGE/019C3EA5.BIN
  • USERS/PAGE/019C3EA5.DSP
  • USERS/PAGE/076E2912.BIN
  • USERS/PAGE/076E2912.DSP
  • USERS/PAGE/1303AC21.BIN
  • USERS/PAGE/1303AC21.DSP
  • USERS/PAGE/1347FF25.BIN
  • USERS/PAGE/1347FF25.DSP
  • USERS/PAGE/2797A4FA.BIN
  • USERS/PAGE/2797A4FA.DSP
  • USERS/PAGE/5B33F7CB.BIN
  • USERS/PAGE/5B33F7CB.DSP
  • USERS/PAGE/pages.ini
  • USERS/PAGE/ĬÈÏÒ³Ãæ.BIN
  • USERS/PAGE/ĬÈÏÒ³Ãæ.DSP
  • USERS/PAGE/×Ô¶¯Ò³Ãæ.BIN
  • USERS/PAGE/×Ô¶¯Ò³Ãæ.DSP
  • USERS/alert.WAV
  • USERS/color.dat
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • ZipArchive.dll
    .dll windows:4 windows x86 arch:x86

    1610e39461e6d3ef70abf61ff33508a8


    Headers

    Imports

    Exports

    Sections

  • caption.txt
  • crcdll.dll
    .dll windows:4 windows x86 arch:x86

    b16c84fb9dafedccf1ee156134c431f8


    Headers

    Imports

    Sections

  • iSky.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • iconfig.ini
  • ip.txt
  • license.txt
  • sky2000.ico
  • sky2000.jpg
    .jpg
  • skyUpdate2.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • vic32.dll
    .dll windows:4 windows x86 arch:x86

    bccc9c2414227ee28e93b13aaa9d5180


    Headers

    Imports

    Exports

    Sections