Overview

overview

8

Static

static

7

sdvdinst.exe

windows7-x64

1

sdvdinst.exe

windows10-2004-x64

1

nLame.dll

windows7-x64

7

nLame.dll

windows10-2004-x64

7

sdvd-uninst.exe

windows7-x64

7

sdvd-uninst.exe

windows10-2004-x64

7

sdvdrip.chm

windows7-x64

1

sdvdrip.chm

windows10-2004-x64

1

sdvdrip.exe

windows7-x64

8

sdvdrip.exe

windows10-2004-x64

8

xvid.dll

windows7-x64

1

xvid.dll

windows10-2004-x64

1

xvidcore.dll

windows7-x64

1

xvidcore.dll

windows10-2004-x64

1

xvidvfw.dll

windows7-x64

1

xvidvfw.dll

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    18bffcb06145a25cb5d7affe6b602af2_JaffaCakes118

  • Size

    1.0MB

  • MD5

    18bffcb06145a25cb5d7affe6b602af2

  • SHA1

    92de30388c9918c869f45ea7b5f0168d9a9224d6

  • SHA256

    19a281fb881455d3a58cb60883b1139573a39f3742dfe9efdb6c5ce77243ed48

  • SHA512

    8581f732182b78ad1402a74eaddae4ecb754b4dc02497511fd8de07d9ac4e654eaa97cda6c43380e3ffd0fc9b1a0af928a3529eb9024605b35fb9af7b88b556c

  • SSDEEP

    24576:VMaVc+Qd2/myN72QZEW6asZbdfRzW3uNM6W5AE/9sGuTAYPq:Ca+t8/mPQHhC/f0mm0THq

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 18bffcb06145a25cb5d7affe6b602af2_JaffaCakes118
    .rar
  • sdvdinst.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • nLame.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • sdvd-uninst.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • sdvdrip.chm
    .chm
  • sdvdrip.exe
    .exe windows:4 windows x86 arch:x86

    ef31b4d188db8f2831dae2ca3d160a4e


    Headers

    Imports

    Sections

  • xvid.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    17fde9879ca43c508b02b958e81a3690


    Headers

    Imports

    Exports

    Sections

  • xvid.inf
  • xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    8c6cf3c7f9082f43029ae889242b0467


    Headers

    Imports

    Exports

    Sections

  • xvidvfw.dll
    .dll windows:4 windows x86 arch:x86

    9884024acc7e36a44b8a4b1db68151af


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url