General

  • Target

    37bd5b235baacd633695c0428feac849_JaffaCakes118

  • Size

    271KB

  • MD5

    37bd5b235baacd633695c0428feac849

  • SHA1

    5fe4a4a6efefc4d560e999521c9f03dce3998f2b

  • SHA256

    a2e97240c7c6a9eecfb02d209994f39896c1ba17b847359070e982f471105c5c

  • SHA512

    b2738a419a16b37a8bc76c3e577daaa07e3e06ece91ed76bfb677dec63e085d7ec4b9e09bf5d61d0e3e1ee1c47f68a1dd5a39477dcd44f0d7d96c38ee928fbac

  • SSDEEP

    6144:zQq2tjcj2JHaJKN2ja89jSiid7KYy8UGVhClBiQl:4LHNNp8FSNd7KYTioQl

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 37bd5b235baacd633695c0428feac849_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ACCEPT.bmp
  • $PLUGINSDIR/ACCEPT_on.bmp
  • $PLUGINSDIR/AGREE_on.bmp
  • $PLUGINSDIR/BACK.bmp
  • $PLUGINSDIR/BACKNEXT_on.bmp
  • $PLUGINSDIR/BLANK.bmp
  • $PLUGINSDIR/CANCEL.bmp
  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:5 windows x86 arch:x86

    17ea51acf0005f354251d1882460a13c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DECLINE.bmp
  • $PLUGINSDIR/DISAGREE.bmp
  • $PLUGINSDIR/FINISH_on.bmp
  • $PLUGINSDIR/FM_Logo.bmp
  • $PLUGINSDIR/FM_TB.bmp
  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Firstlook_EULA.rtf
    .rtf
  • $PLUGINSDIR/Firstlook_banner.bmp
  • $PLUGINSDIR/NEXT_off.bmp
  • $PLUGINSDIR/NEXT_on.bmp
  • $PLUGINSDIR/NO.bmp
  • $PLUGINSDIR/SK_Background.bmp
  • $PLUGINSDIR/SK_Logo.bmp
  • $PLUGINSDIR/SK_bannerlooker.bmp
  • $PLUGINSDIR/SK_buzzdoc.bmp
  • $PLUGINSDIR/SK_ezlooker.bmp
  • $PLUGINSDIR/SK_pagerage.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WC_banner.bmp
  • $PLUGINSDIR/WC_logo.bmp
  • $PLUGINSDIR/YES_on.bmp
  • $PLUGINSDIR/graphicalinstaller.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    ecfc30d297c65075fc7d3aa46feca14c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pwgen.dll
    .dll windows:4 windows x86 arch:x86

    ff5d1f24996d7518c448de0ef89caf7f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/rk_banner.bmp
  • $PLUGINSDIR/unicode.dll
    .dll windows:4 windows x86 arch:x86

    1816c297bf3676e06e2bac92caa66e73


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/wbg.bmp
  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Uninstall.exe.nsis