General

  • Target

    0d64974d749ddb65a4a843af307f64a8_JaffaCakes118

  • Size

    8.3MB

  • MD5

    0d64974d749ddb65a4a843af307f64a8

  • SHA1

    3402ee86fd38872c180eb441f78640b45093e38a

  • SHA256

    0825019e5f53a8cff9160f62bb41213596f7f702842932d0ee5eb8702307eed0

  • SHA512

    f27214300b73adbad13b2295114a67abee03fd911a58275d260428577343a7f1a4e5fb818a386c4ae296b7e06867e24bf0bb87cb8254265a36965ad89e9de874

  • SSDEEP

    196608:qAVDZlLBs4ItgsJ7IiZYa7WQEjw+5dzTZycyB8pqDWJnKFvl+U2:qmJwtgM7ZWQEjw+f8EgMEdX2

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d64974d749ddb65a4a843af307f64a8_JaffaCakes118
    .rar
  • Switchbotv3_0_0_5/Readme_hackshield_bypass.txt
  • Switchbotv3_0_0_5/Switchbotv3 - alter Injector.exe
    .exe windows:4 windows x86 arch:x86

    90aad209d421917e0891418faf8bb724


    Headers

    Imports

    Sections

  • Switchbotv3_0_0_5/Switchbotv3.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Switchbotv3_0_0_5/Switchbotv3_Handbuch.pdf
    .pdf
  • Switchbotv3_0_0_5/config/czech.lang
  • Switchbotv3_0_0_5/config/english.lang
  • Switchbotv3_0_0_5/config/german.lang
  • Switchbotv3_0_0_5/config/italian.lang
  • Switchbotv3_0_0_5/config/lang_conf.conf
  • Switchbotv3_0_0_5/config/russian.lang
  • Switchbotv3_0_0_5/core/QtCore4.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_5/core/QtGui4.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Switchbotv3_0_0_5/core/switchbot.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Exports

    Sections

  • Switchbotv3_0_0_5/hackshield_bypass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Switchbotv3_0_0_5/settings/demo_einstellung.botcfg
  • Switchbotv3_0_0_5/switchbotv3.dll
    .dll windows:5 windows x86 arch:x86

    b5fbb2e2ce335b665b64c2c420175b2c


    Headers

    Imports

    Sections