General

  • Target

    2da2ee2f8b3c017f4dea6cbaa9c937f8_JaffaCakes118

  • Size

    1.6MB

  • MD5

    2da2ee2f8b3c017f4dea6cbaa9c937f8

  • SHA1

    9fef97c8e24178c7c90bc44301e1c2f2f03fb1b7

  • SHA256

    1c0ef0bd598021900fe599836eded28e51091aa0cbdb872c6dceb56cd9c6a782

  • SHA512

    a9f68eca86b776466e2ae2bed2c5c88b7f67b5a99a15091f006a08d012c5455f8aef024b4bb9c34a0b3124d2a2f6c5ab0934b13e19beb5e5f1eecfd30f6bcfad

  • SSDEEP

    49152:nFbh5ISCIuTPCuVuuDVS17utIl/bebr+9bcp:x+INu7

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2da2ee2f8b3c017f4dea6cbaa9c937f8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • FreePlay.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections