Overview

overview

7

Static

static

7

31339d7a43...18.exe

windows7-x64

7

31339d7a43...18.exe

windows10-2004-x64

7

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...om.dll

windows7-x64

7

$PLUGINSDI...om.dll

windows10-2004-x64

7

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

֩�...Ϸ.exe

windows7-x64

1

֩�...Ϸ.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    31339d7a434d3626a72d3b52aadc97ba_JaffaCakes118

  • Size

    721KB

  • MD5

    31339d7a434d3626a72d3b52aadc97ba

  • SHA1

    c0d11ac82ad3e95cf74c3b057c4472bda9dc91c6

  • SHA256

    29270e9e877991dee346b928ebd4a66412d4cc4f878de231c1aae9608e443ca7

  • SHA512

    84a086e3e025ea5ddeda374627d596070523dbe66c9c444d0b5119d2876d775685ca0d757efeee58084a748f6e93da1f3eeb429c35b0af473f59bc7d7d71c723

  • SSDEEP

    12288:HRigTFI6kmDaOIBN5PU/J54uTHfE5eySLOMYt5lvxDcXYqHx6ljM8Zkz+fpu:H0g+rmDa5N5Ps/yWOwYmOpfI

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 31339d7a434d3626a72d3b52aadc97ba_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Baidubar.bmp
  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    71822a6591db32058c3984a70d90133c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/left.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • ֩Ϸ.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Ϸгԭ򼰽.txt