151bae191c5ed77b2b3c31e93ae5c680_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

151bae191c5ed77b2b3c31e93ae5c680_JaffaCakes118
Size

461KB
MD5

151bae191c5ed77b2b3c31e93ae5c680
SHA1

af3904cdd4f72547ea804514f1363121954f8200
SHA256

a63c2ab5cc308a18adc1047804dceca4b5074f74a9150d7b192b934d8fee3c84
SHA512

4c6d51177e9334a2691960017305fe220e8133fa3d3c2f5be2e2e8d377f31a4f39aaa48a63d5dc2aee67702f32755509b7dadf065220000206ee3e456806e689
SSDEEP

12288:/aQ1KT9yYdteS0CD3TsvWvQMJcM9I/16k6N3:SQ0T9pINCjMcFI/1M3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack003/run/Client.exe	upx
static1/unpack003/run/Server.exe	upx

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack003/run/Client.exe
unpack004/out.upx
unpack003/run/Server.exe
unpack005/out.upx

Files

151bae191c5ed77b2b3c31e93ae5c680_JaffaCakes118
.rar
icq_doc.zip
.zip
doc.doc
.doc windows office2003
Ŀ¼.doc
.doc windows office2003
icq_run.zip
.zip
run/Client.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
run/Server.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
run/database.mdb
run/db97.mdb
run/face/1-1.bmp
run/face/1-2.bmp
run/face/10-1.bmp
run/face/10-2.bmp
run/face/11-1.bmp
run/face/11-2.bmp
run/face/12-1.bmp
run/face/12-2.bmp
run/face/13-1.bmp
run/face/13-2.bmp
run/face/14-1.bmp
run/face/14-2.bmp
run/face/15-1.bmp
run/face/15-2.bmp
run/face/16-1.bmp
run/face/16-2.bmp
run/face/17-1.bmp
run/face/17-2.bmp
run/face/18-1.bmp
run/face/18-2.bmp
run/face/19-1.bmp
run/face/19-2.bmp
run/face/2-1.bmp
run/face/2-2.bmp
run/face/20-1.bmp
run/face/20-2.bmp
run/face/21-1.bmp
run/face/21-2.bmp
run/face/22-1.bmp
run/face/22-2.bmp
run/face/23-1.bmp
run/face/23-2.bmp
run/face/24-1.bmp
run/face/24-2.bmp
run/face/25-1.bmp
run/face/25-2.bmp
run/face/26-1.bmp
run/face/26-2.bmp
run/face/27-1.bmp
run/face/27-2.bmp
run/face/28-1.bmp
run/face/28-2.bmp
run/face/29-1.bmp
run/face/29-2.bmp
run/face/3-1.bmp
run/face/3-2.bmp
run/face/30-1.bmp
run/face/30-2.bmp
run/face/31-1.bmp
run/face/31-2.bmp
run/face/32-1.bmp
run/face/32-2.bmp
run/face/33-1.bmp
run/face/33-2.bmp
run/face/34-1.bmp
run/face/34-2.bmp
run/face/35-1.bmp
run/face/35-2.bmp
run/face/36-1.bmp
run/face/36-2.bmp
run/face/37-1.bmp
run/face/37-2.bmp
run/face/38-1.bmp
run/face/38-2.bmp
run/face/39-1.bmp
run/face/39-2.bmp
run/face/4-1.bmp
run/face/4-2.bmp
run/face/40-1.bmp
run/face/40-2.bmp
run/face/41-1.bmp
run/face/41-2.bmp
run/face/42-1.bmp
run/face/42-2.bmp
run/face/43-1.bmp
run/face/43-2.bmp
run/face/44-1.bmp
run/face/44-2.bmp
run/face/45-1.bmp
run/face/45-2.bmp
run/face/46-1.bmp
run/face/46-2.bmp
run/face/47-1.bmp
run/face/47-2.bmp
run/face/48-1.bmp
run/face/48-2.bmp
run/face/49-1.bmp
run/face/49-2.bmp
run/face/5-1.bmp
run/face/5-2.bmp
run/face/50-1.bmp
run/face/50-2.bmp
run/face/51-1.bmp
run/face/51-2.bmp
run/face/52-1.bmp
run/face/52-2.bmp
run/face/53-1.bmp
run/face/53-2.bmp
run/face/54-1.bmp
run/face/54-2.bmp
run/face/55-1.bmp
run/face/55-2.bmp
run/face/56-1.bmp
run/face/56-2.bmp
run/face/57-1.bmp
run/face/57-2.bmp
run/face/58-1.bmp
run/face/58-2.bmp
run/face/59-1.bmp
run/face/59-2.bmp
run/face/6-1.bmp
run/face/6-2.bmp
run/face/60-1.bmp
run/face/60-2.bmp
run/face/61-1.bmp
run/face/61-2.bmp
run/face/62-1.bmp
run/face/62-2.bmp
run/face/63-1.bmp
run/face/63-2.bmp
run/face/64-1.bmp
run/face/64-2.bmp
run/face/65-1.bmp
run/face/65-2.bmp
run/face/66-1.bmp
run/face/66-2.bmp
run/face/7-1.bmp
run/face/7-2.bmp
run/face/8-1.bmp
run/face/8-2.bmp
run/face/9-1.bmp
run/face/9-2.bmp
run/face/face.ini
run/readme.txt
icq_src.zip
.zip
src/client/AddFriendDlg.cpp
src/client/AddFriendDlg.h
src/client/BmpButton.cpp
src/client/BmpButton.h
src/client/BmpComBox.cpp
src/client/BmpComBox.h
src/client/ChangePwd.cpp
src/client/ChangePwd.h
src/client/Client.clw
src/client/Client.cpp
src/client/Client.dsp
src/client/Client.dsw
src/client/Client.h
src/client/Client.rc
src/client/ClientSocket.cpp
src/client/ClientSocket.h
src/client/Common.h
src/client/Data.cpp
src/client/Data.h
src/client/FriendDetail.cpp
src/client/FriendDetail.h
src/client/GfxGroupEdit.cpp
src/client/GfxGroupEdit.h
src/client/GfxOutBarCtrl.cpp
src/client/GfxOutBarCtrl.h
src/client/GfxPopupMenu.cpp
src/client/GfxPopupMenu.h
src/client/LoginDlg.cpp
src/client/LoginDlg.h
src/client/LookDlg.cpp
src/client/LookDlg.h
src/client/MainFrm.cpp
src/client/MainFrm.h
src/client/ModifyPIDlg.cpp
src/client/ModifyPIDlg.h
src/client/Msg.cpp
src/client/Msg.h
src/client/MultiSendDlg.cpp
src/client/MultiSendDlg.h
src/client/RegisterDlg.cpp
src/client/RegisterDlg.h
src/client/RequestFriendDetail.cpp
src/client/SearchDlg.cpp
src/client/SearchDlg.h
src/client/SendBroadcastDlg.cpp
src/client/SendBroadcastDlg.h
src/client/SendToAllDlg.cpp
src/client/SendToAllDlg.h
src/client/SetupServerDlg.cpp
src/client/SetupServerDlg.h
src/client/ShowAddMsgDlg.cpp
src/client/ShowAddMsgDlg.h
src/client/ShowBroadcastDlg.cpp
src/client/ShowBroadcastDlg.h
src/client/ShowOnlineDlg.cpp
src/client/ShowOnlineDlg.h
src/client/StdAfx.cpp
src/client/StdAfx.h
src/client/TalkDlg.cpp
src/client/TalkDlg.h
src/client/TrayIcon.cpp
src/client/TrayIcon.h
src/client/common.cpp
src/client/res/Checkmrk.ico
src/client/res/Client.ico
src/client/res/Client.rc2
src/client/res/LargeIcon.bmp
src/client/res/Network Neighbourhood.ico
src/client/res/SmallIcon.bmp
src/client/res/Toolbar.bmp
src/client/res/User.ico
src/client/res/aaa.ico
src/client/res/bmp382.bmp
src/client/res/bmp476.bmp
src/client/res/bmp573.bmp
src/client/res/bmp682.bmp
src/client/res/bmp683.bmp
src/client/res/bmp684.bmp
src/client/res/check_la.ico
src/client/res/cur1320.cur
src/client/res/cur268.cur
src/client/res/find.bmp
src/client/res/find1.bmp
src/client/res/find2.bmp
src/client/res/help.bmp
src/client/res/ico00001.ico
src/client/res/ico746.ico
src/client/res/ico747.ico
src/client/res/icon2.ico
src/client/res/icon4.ico
src/client/res/icr_hand.cur
src/client/res/idr_chat.ico
src/client/res/idr_find.ico
src/client/res/idr_frie.ico
src/client/res/idr_home.ico
src/client/res/idr_main.ico
src/client/res/idr_mdis.ico
src/client/res/idr_mess.ico
src/client/res/idr_noti.ico
src/client/res/idr_onhi.ico
src/client/res/idr_onli.ico
src/client/res/idr_qq.ico
src/client/res/idr_sear.ico
src/client/res/idr_sj.ico
src/client/res/idr_sj1.ico
src/client/res/mess_man.bmp
src/client/res/message.bmp
src/client/res/person_s.bmp
src/client/res/quit.bmp
src/client/res/red.ico
src/client/res/sys_setu.bmp
src/client/res/toolbar1.bmp
src/client/res/toolbar2.bmp
src/client/res/toolbar3.bmp
src/client/resource.h
src/server/CheckOnline.cpp
.js
src/server/Common.h
src/server/Data.cpp
src/server/Data.h
src/server/MainFrm.cpp
src/server/MainFrm.h
src/server/Msg.cpp
src/server/Msg.h
src/server/RecvData.cpp
.js
src/server/Resource.h
src/server/Server.clw
src/server/Server.cpp
.js
src/server/Server.dsp
src/server/Server.dsw
src/server/Server.h
src/server/Server.rc
src/server/ServerDoc.cpp
src/server/ServerDoc.h
src/server/ServerView.cpp
src/server/ServerView.h
src/server/SetupDlg.cpp
src/server/SetupDlg.h
src/server/Socket.cpp
src/server/Socket.h
src/server/StdAfx.cpp
src/server/StdAfx.h
src/server/TrayIcon.cpp
src/server/TrayIcon.h
src/server/res/EXPLORER.ICO
src/server/res/HANDSHAK.ICO
src/server/res/MAIL01A.ICO
src/server/res/MAIL03.ICO
src/server/res/MAIL11.ICO
src/server/res/MAIL12.ICO
src/server/res/Nethood.ico
src/server/res/Point04.ico
src/server/res/REMTEACC.ICO
src/server/res/Server.ico
src/server/res/Server.rc2
src/server/res/ServerDoc.ico
src/server/res/Toolbar.bmp
src/server/res/ico577.ico
src/server/res/ico579.ico
src/server/res/idr_frie.ico
src/server/res/netneigh.ico
下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 156KB

UPX1 Size: 67KB - Virtual size: 68KB

.rsrc Size: 10KB - Virtual size: 12KB

Headers

File Characteristics

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 60KB - Virtual size: 59KB

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 76KB

UPX1 Size: 27KB - Virtual size: 28KB

.rsrc Size: 13KB - Virtual size: 16KB

Headers

File Characteristics

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 20KB - Virtual size: 17KB

UPX0
Size: - Virtual size: 156KB

UPX1
Size: 67KB - Virtual size: 68KB

.rsrc
Size: 10KB - Virtual size: 12KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 60KB - Virtual size: 59KB

UPX0
Size: - Virtual size: 76KB

UPX1
Size: 27KB - Virtual size: 28KB

.rsrc
Size: 13KB - Virtual size: 16KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 20KB - Virtual size: 17KB