Overview

overview

8

Static

static

7

gg/JPSKB.exe

windows7-x64

3

gg/JPSKB.exe

windows10-2004-x64

3

gg/SkinH_EL.dll

windows7-x64

7

gg/SkinH_EL.dll

windows10-2004-x64

7

gg/Unlocke...er.exe

windows7-x64

8

gg/Unlocke...er.exe

windows10-2004-x64

8

gg/Unlocke...nt.exe

windows7-x64

1

gg/Unlocke...nt.exe

windows10-2004-x64

1

gg/Unlocke...OM.dll

windows7-x64

1

gg/Unlocke...OM.dll

windows10-2004-x64

1

gg/Unlocke...r5.sys

windows7-x64

1

gg/Unlocke...r5.sys

windows10-2004-x64

1

gg/Unlocke...ok.dll

windows7-x64

1

gg/Unlocke...ok.dll

windows10-2004-x64

1

gg/Unlocke...le.exe

windows7-x64

8

gg/Unlocke...le.exe

windows10-2004-x64

8

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

1

$PLUGINSDI...sh.dll

windows10-2004-x64

1

gg/iext.dll

windows7-x64

1

gg/iext.dll

windows10-2004-x64

1

gg/krnln.dll

windows7-x64

1

gg/krnln.dll

windows10-2004-x64

1

gg/shutcoolxp.exe

windows7-x64

1

gg/shutcoolxp.exe

windows10-2004-x64

1

gg/多姿�...��.exe

windows7-x64

1

gg/多姿�...��.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    180b2924d2455b5d78008a5089e777cb_JaffaCakes118

  • Size

    3.2MB

  • MD5

    180b2924d2455b5d78008a5089e777cb

  • SHA1

    f4d719cf0809abc4557576e485668deda701367a

  • SHA256

    a7b38fbf1a36a09613d25573c8d95783fb0a0991cfddcf69d19c0828936c8dd3

  • SHA512

    8e2ee0a26ea1d9b76697ebe9401297e1ebc343654c5bdba76da77df3a5930e6355d2d4b06ba0577c8291dd1d71428c22c31ddb7045eae04ae28364bf3d802cc5

  • SSDEEP

    49152:fAX5jeKGJ0+u09C3g0jDI38WS1Xn6jtZbdVtfRP9aoJ0v2U/sCqRWiHd1EjSWh:fMg9u1tjMsUbnVUECqRBHLWSWh

Score
7/10
aspackv2upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 180b2924d2455b5d78008a5089e777cb_JaffaCakes118
    .rar
  • gg/JPSKB.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gg/README.TXT
  • gg/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • gg/UnlockerPortable/App/AppInfo/appicon.ico
  • gg/UnlockerPortable/App/AppInfo/appicon_16.png
    .png
  • gg/UnlockerPortable/App/AppInfo/appicon_32.png
    .png
  • gg/UnlockerPortable/App/AppInfo/appinfo.ini
  • gg/UnlockerPortable/App/Unlocker/README.TXT
  • gg/UnlockerPortable/App/Unlocker/Unlocker.exe
    .exe windows:4 windows x86 arch:x86

    180da66498d17cf39dc4660da43dee0c


    Headers

    Imports

    Sections

  • gg/UnlockerPortable/App/Unlocker/UnlockerAssistant.exe
    .exe windows:4 windows x86 arch:x86

    a510baa3ecd268c6c6bb7d395fef0aad


    Headers

    Imports

    Sections

  • gg/UnlockerPortable/App/Unlocker/UnlockerCOM.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cab4339f8b761ab31e628f0fd642a7a8


    Headers

    Imports

    Exports

    Sections

  • gg/UnlockerPortable/App/Unlocker/UnlockerDriver5.sys
    .sys windows:4 windows x86 arch:x86

    2a015bf36d12492d1085356809814d9d


    Headers

    Imports

    Sections

  • gg/UnlockerPortable/App/Unlocker/UnlockerHook.dll
    .dll windows:4 windows x86 arch:x86

    f4d093db5e466a48d555b9ceadb39dab


    Headers

    Imports

    Exports

    Sections

  • gg/UnlockerPortable/Data/Unlocker/Unlocker.cfg
  • gg/UnlockerPortable/Data/UnlockerPortable.ini
  • gg/UnlockerPortable/Other/Help/images/favicon.ico
  • gg/UnlockerPortable/Other/Help/images/help_background_footer.png
    .png
  • gg/UnlockerPortable/Other/Help/images/help_background_header.png
    .png
  • gg/UnlockerPortable/Other/Help/images/help_logo_top.png
    .png
  • gg/UnlockerPortable/Other/Help/style.css
  • gg/UnlockerPortable/UnlockerPortable.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    eee37c14e102da3f62385f9796c701ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • gg/UnlockerPortable/UnlockerPortable.ini
  • gg/aero.she
  • gg/black.she
  • gg/config.dat
  • gg/iext.DLL
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • gg/krnln.DLL
    .dll windows:4 windows x86 arch:x86

    1021c4a553644f3ae1cb67958917960d


    Headers

    Imports

    Exports

    Sections

  • gg/shutcoolxp.exe
    .exe windows:4 windows x86 arch:x86

    0feeb9c793a2d14a38f3b29c95376cdb


    Headers

    Imports

    Sections

  • gg/whitefire.she
  • gg/多姿万年历v37-绿色特别版.exe
    .exe windows:4 windows x86 arch:x86

    9165ea3e914e03bda3346f13edbd6ccd


    Headers

    Imports

    Sections

  • gg/截图工具.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gg/新云软件.url
    .url
  • gg/终极单位换算器3.3.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gg/Ｃ盘资料备份.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • pp.ini
  • 云宝贝软件管理2.5.exe
    .exe windows:4 windows x86 arch:x86

    7d9a4deb832bf5fe83d317ed628612fe


    Headers

    Imports

    Sections

  • 常用工具.edb
  • 游戏.edb
  • 皮肤/vista.she
  • 皮肤/［X.o］-MSN.she
  • 皮肤/［X.o］-QQ2009_宽_底边.she
  • 皮肤/［X.o］-QQ2009_窄_底边.she
  • 皮肤/［X.o］-QQ影音.she
  • 皮肤/［X.o］-REAL.she
  • 皮肤/［X.o］-炫绿.she
  • 皮肤/［X.o］-积木.she
  • 软件管理.edb
  • 软件管理.edt
  • 软件管理2.EDT
  • 软件管理2.edb