General

  • Target

    3a63a22c37c4eeb3f87b24a9f4968e1e_JaffaCakes118

  • Size

    278KB

  • MD5

    3a63a22c37c4eeb3f87b24a9f4968e1e

  • SHA1

    c2af8c6dbe161d8e0544a21a1523949dfc1d8d80

  • SHA256

    6c4b513cd6d9f4be0bc5101f9fce7b94036a36499011745670dc396a30ef3304

  • SHA512

    0f1dc6ce683ce41ba7f0dad53c62863ff029c8164af7f526d665fb817bf6fee7f5cfa617af9968d24a68f884acb625303f4b52ac3e2a250339496bea9678f26e

  • SSDEEP

    6144:Fe34mXI8aj75+ZPPfnE2Qyn20U3VTv/XzFCwqU6t75+ZPPfnE2Qyn20U5:yXdajF+ZPPfnEUnWp/j0UQF+ZPPfnEUW

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 3a63a22c37c4eeb3f87b24a9f4968e1e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    ee75cece63794fa22feebed80a358b16


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe.nsis
  • WallTab.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7a30e9f3cfb991db49472d0b86b949e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WallTab.exe
    .exe windows:4 windows x86 arch:x86

    c4c10380f46fd008a9d6374d85bf4000


    Code Sign

    Headers

    Imports

    Sections