General

  • Target

    33929a2f7bb42c26efc5c86d7189177a_JaffaCakes118

  • Size

    262KB

  • MD5

    33929a2f7bb42c26efc5c86d7189177a

  • SHA1

    d7e9fc2969882e576364e471a164ce7e2a2eef57

  • SHA256

    1eece024b47f751c367f15335f1907ed226404bec0741426fab6d268fdf1a453

  • SHA512

    cfbbc6410f110db85db32b0804fc814ac5605eba0d6c9258a348311cbcbdbaa1669bb1a9476ff99dbe64015d68726661f15480f3151598848988bda3b85a6280

  • SSDEEP

    6144:Be346i+75+ZPPfnE2Qyn20UATyniR1E2OGPCXiu75+ZPPfnE2Qyn20U:Si+F+ZPPfnEUnPTKiUhGaiuF+ZPPfnEG

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 33929a2f7bb42c26efc5c86d7189177a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    ee75cece63794fa22feebed80a358b16


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • EasyOn.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    699f79c4518c9e55bd0f8a32a044cacc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EasyOn.exe
    .exe windows:4 windows x86 arch:x86

    d52f9d9d194587a482c3976b441ddc5b


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe.nsis