Overview

overview

7

Static

static

7

0c4b9e9ed7...18.exe

windows7-x64

7

0c4b9e9ed7...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/nsWeb.dll

windows7-x64

3

$PLUGINSDIR/nsWeb.dll

windows10-2004-x64

3

C:/Program...u.html

windows7-x64

1

C:/Program...u.html

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

¡¶µÁ±...bd.exe

windows7-x64

6

¡¶µÁ±...bd.exe

windows10-2004-x64

6

¡¶µÁ±...¤.exe

windows7-x64

7

¡¶µÁ±...¤.exe

windows10-2004-x64

7

¡¶µÁ±...¤.lnk

windows7-x64

3

¡¶µÁ±...¤.lnk

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c4b9e9ed70308a49238430a2be55183_JaffaCakes118

  • Size

    980KB

  • MD5

    0c4b9e9ed70308a49238430a2be55183

  • SHA1

    5326dc4ef1b0b33f46a454ac493dafc9b588114e

  • SHA256

    954facb3f533792a892fa8303231efc673dc25d53bd4a484abc874f76f7cfcb7

  • SHA512

    e8149bbbca785d7de2175611386110c2c9048c30069d26674dfb63f4633b45c94749db8d81261e11b1892eb68a1ae24d357340c85d20bb79a965c1dfb8fd3855

  • SSDEEP

    24576:cmM2+UF4RvzAp5QAfaiVzpyjMIVnLd2sQZKRAU2Ma:OMw9XqzpyjMIxACAX

Score
7/10
aspackv2upx

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 0c4b9e9ed70308a49238430a2be55183_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ButtonLinker.dll
    .dll windows:4 windows x86 arch:x86

    8466b6530f29387ac28e94fe1e74b98f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsWeb.dll
    .dll windows:4 windows x86 arch:x86

    d12ed83df3a4aa87887f14a225ff95d4


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Baidu/Baidu.html
    .html .js polyglot
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ¡¶µÁ±¦ÊÀ¼Ò¡·È«¼¯(¸¸Ç×°æ¡¢ÊÀ¼Òºó´«) ¿Æ»ÃÁéÒì ¿Ö²À¾ªã¤ ÎíÂúÀ¹½­/Rbd.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ¡¶µÁ±¦ÊÀ¼Ò¡·È«¼¯(¸¸Ç×°æ¡¢ÊÀ¼Òºó´«) ¿Æ»ÃÁéÒì ¿Ö²À¾ªã¤ ÎíÂúÀ¹½­/TXTÎı¾Ð¡ËµÔĶÁÆ÷.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • ¡¶µÁ±¦ÊÀ¼Ò¡·È«¼¯(¸¸Ç×°æ¡¢ÊÀ¼Òºó´«) ¿Æ»ÃÁéÒì ¿Ö²À¾ªã¤ ÎíÂúÀ¹½­/install.ico
  • ¡¶µÁ±¦ÊÀ¼Ò¡·È«¼¯(¸¸Ç×°æ¡¢ÊÀ¼Òºó´«) ¿Æ»ÃÁéÒì ¿Ö²À¾ªã¤ ÎíÂúÀ¹½­/µÁ±¦ÊÀ¼Ò.txt
  • ¡¶µÁ±¦ÊÀ¼Ò¡·È«¼¯(¸¸Ç×°æ¡¢ÊÀ¼Òºó´«) ¿Æ»ÃÁéÒì ¿Ö²À¾ªã¤ ÎíÂúÀ¹½­/ºÃÊé¶à Ãâ·ÑTXTС˵ÏÂÔØ.lnk
    .lnk
  • ¡¶µÁ±¦ÊÀ¼Ò¡·È«¼¯(¸¸Ç×°æ¡¢ÊÀ¼Òºó´«) ¿Æ»ÃÁéÒì ¿Ö²À¾ªã¤ ÎíÂúÀ¹½­/ºÃÊé¶à.txt