General

  • Target

    0d889c152540cb00e670f0d6abd21bba_JaffaCakes118

  • Size

    2.0MB

  • MD5

    0d889c152540cb00e670f0d6abd21bba

  • SHA1

    98082a854a20d5fe08d309b6d551af5a28176816

  • SHA256

    e696b9154bc150d4d6a821b20dbe140b095775f51290b08650d99b3a29d8c0f9

  • SHA512

    861a21d945f6531fd10a17191ff482f12c744868dfb76b55fe809ddc332b10e814aac826e93fcded67904391ccef08bf53b4577a41796ee4ce5ad6bb72863dff

  • SSDEEP

    49152:TEOMB9JyO/Ii+fjPdbT3JLP/OIlFn+sd8my:fkkli+fV31OQnFd8my

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 0d889c152540cb00e670f0d6abd21bba_JaffaCakes118
    .rar
  • AQSSetup.exe
    .exe windows:4 windows x86 arch:x86

    4d17be67c8d0394c5c1b8e725359ed89


    Headers

    Imports

    Sections

  • GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    2ace81ae239dd5867a499e7debe900d2


    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    98e924bf7e10575cff3a7ce55deac47b


    Headers

    Imports

    Sections

  • TYFRCtrl.dll
    .dll windows:4 windows x86 arch:x86

    8c758861835753e621455bdf6e372c05


    Headers

    Imports

    Sections

  • TYFRGui.exe
    .exe windows:4 windows x86 arch:x86

    a07c188c24b048845cb6183a936d5039


    Headers

    Imports

    Sections

  • TYFRSrv.exe
    .exe windows:4 windows x86 arch:x86

    54d879a4e5b69fcabc1556b59a1936f8


    Headers

    Imports

    Sections

  • TYFRTray.exe
    .exe windows:4 windows x86 arch:x86

    ab3ea977fc16e007dda01860aa4ad7bf


    Headers

    Imports

    Sections

  • Uninst.exe
    .exe windows:4 windows x86 arch:x86

    5afd90b81ec270fe762cafb8e7823121


    Headers

    Imports

    Sections

  • blockctrl.dll
    .dll windows:4 windows x86 arch:x86

    17ddba60017e5ba67925715beb259d89


    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • foldctrl.dll
    .dll windows:4 windows x86 arch:x86

    cce7ca621421baf115b21c41e7c627be


    Headers

    Imports

    Exports

    Sections

  • imagehlp.dll
    .dll windows:5 windows x86 arch:x86

    ae2dd82bd5658e4e07c5c87c071725e8


    Headers

    Imports

    Exports

    Sections

  • msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • psapi.dll
    .dll windows:5 windows x86 arch:x86

    56c78d77e4cd475b23af92183b7936ad


    Headers

    Imports

    Exports

    Sections

  • tyblock.sys
    .sys windows:5 windows x86 arch:x86

    9d6544e2649bb8cea9547abc3821c4ee


    Headers

    Imports

    Sections

  • tyrevert.sys
    .sys windows:5 windows x86 arch:x86

    7dbb0423a3027cb49b8abedf07f889be


    Headers

    Imports

    Sections

  • 新云软件.url
    .url