Overview

overview

7

Static

static

7

21e671087f...18.exe

windows7-x64

7

21e671087f...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

1

$R0.dll

windows10-2004-x64

1

$R2/NSIS.L...4_.exe

windows7-x64

1

$R2/NSIS.L...4_.exe

windows10-2004-x64

1

$SYSDIR/MACDll.dll

windows7-x64

1

$SYSDIR/MACDll.dll

windows10-2004-x64

1

$SYSDIR/lame_enc.dll

windows7-x64

3

$SYSDIR/lame_enc.dll

windows10-2004-x64

3

$SYSDIR/li...le.dll

windows7-x64

7

$SYSDIR/li...le.dll

windows10-2004-x64

7

$SYSDIR/ogg.dll

windows7-x64

7

$SYSDIR/ogg.dll

windows10-2004-x64

7

$SYSDIR/vorbis.dll

windows7-x64

7

$SYSDIR/vorbis.dll

windows10-2004-x64

7

$SYSDIR/vo...le.dll

windows7-x64

7

$SYSDIR/vo...le.dll

windows10-2004-x64

7

bin/MACDll.dll

windows7-x64

1

bin/MACDll.dll

windows10-2004-x64

3

bin/lame_enc.dll

windows7-x64

3

bin/lame_enc.dll

windows10-2004-x64

3

bin/libsndfile.dll

windows7-x64

7

bin/libsndfile.dll

windows10-2004-x64

7

bin/ogg.dll

windows7-x64

7

bin/ogg.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    21e671087f5b91ec3ccdb307accea315_JaffaCakes118

  • Size

    2.3MB

  • MD5

    21e671087f5b91ec3ccdb307accea315

  • SHA1

    3153430b0488b5d9ffb7c399af2985221a065d88

  • SHA256

    699143ac3d3ccd72a35bcaed47a5e0c96fe235ec4aac65d45e38efebe6e0dd49

  • SHA512

    a480ca9cbfddeeec56e506ba4cc4b8b8ce31ebee7f1e0d9fe8acf08c955c4a077258a778d158310c67915b77f4a215f194ed0865f8066d2ac1e5b4bff86308b1

  • SSDEEP

    49152:axTBEiCjOlI+tN9B7ndw2yIYJQcGRbG2ozkVhHtjUmxF+:aldlI0Pnw2yIQBIbG2jbHtFxE

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 8 IoCs

    Detects file using ACProtect software.

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 21e671087f5b91ec3ccdb307accea315_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    3708bef5cd6e5fb503b4de6477d1b421


    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_4_.exe
    .exe windows:4 windows x86 arch:x86

    a56a9c58ddb2b2da8fde66551747ce70


    Headers

    Imports

    Sections

  • $SYSDIR/MACDll.dll
    .dll windows:4 windows x86 arch:x86

    e2c74ffadae0d70ecf4b14291e53bc3e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    fa173586a4b0eb0918ead3f1c5015cc2


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/libsndfile.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/ogg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/vorbis.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/vorbisfile.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bin/COPYING.LGPL
  • bin/MACDll.dll
    .dll windows:4 windows x86 arch:x86

    e2c74ffadae0d70ecf4b14291e53bc3e


    Headers

    Imports

    Exports

    Sections

  • bin/lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    fa173586a4b0eb0918ead3f1c5015cc2


    Headers

    Imports

    Exports

    Sections

  • bin/libsndfile.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bin/ogg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bin/readme.txt
  • bin/vorbis.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bin/vorbisfile.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections