General

  • Target

    0c76ad49188170aee2d20a699597c289_JaffaCakes118

  • Size

    10.2MB

  • MD5

    0c76ad49188170aee2d20a699597c289

  • SHA1

    c58393d59af7eb57dc88232877afed0dbd85bf35

  • SHA256

    b980730be739cfbd39e8bdaaf6d2308333dbf2c4b7fe24601079a3da5290f826

  • SHA512

    28b8ee9a6014efc233e8627181d06600afb3590cb3c27d5e2b8a5539176922f19e383daa2087af6e8fcfa4c5ff196bc96ef97919ace3e74135023b17e48c9ebb

  • SSDEEP

    196608:9QEL3QN9QxLS+E4Tlz/nfiWgb5boQBVR/Jqf9Odj6ynGnW7NSC1JkxK1v/E5JeTb:i4G9iLSb2RSbhoUJqFOFtwK1v/SeTb

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 5 IoCs

    Detects file using ACProtect software.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c76ad49188170aee2d20a699597c289_JaffaCakes118
    .rar
  • Switchbotv3_0_0_4_RMT2/RMT2Launcher.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_4_RMT2/Readme_hackshield_bypass.txt
  • Switchbotv3_0_0_4_RMT2/Switchbotv3 - alter Injector.exe
    .exe windows:4 windows x86 arch:x86

    90aad209d421917e0891418faf8bb724


    Headers

    Imports

    Sections

  • Switchbotv3_0_0_4_RMT2/Switchbotv3.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Switchbotv3_0_0_4_RMT2/Switchbotv3_Handbuch.pdf
    .pdf
  • Switchbotv3_0_0_4_RMT2/config/czech.lang
  • Switchbotv3_0_0_4_RMT2/config/english.lang
  • Switchbotv3_0_0_4_RMT2/config/german.lang
  • Switchbotv3_0_0_4_RMT2/config/italian.lang
  • Switchbotv3_0_0_4_RMT2/config/lang_conf.conf
  • Switchbotv3_0_0_4_RMT2/config/russian.lang
  • Switchbotv3_0_0_4_RMT2/core/core1.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_4_RMT2/core/core2.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_4_RMT2/core/core3.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_4_RMT2/core/core4.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_4_RMT2/core/core5.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_4_RMT2/core/core6.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Switchbotv3_0_0_4_RMT2/hackshield_bypass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Switchbotv3_0_0_4_RMT2/settings/demo_einstellung.botcfg
  • Switchbotv3_0_0_4_RMT2/switchbotv3.dll
    .dll windows:4 windows x86 arch:x86

    c72a0b997241dfd19a975f78055728aa


    Headers

    Imports

    Exports

    Sections