General

  • Target

    3ab2e1b1a049332e4bddae2c5aa8343c_JaffaCakes118

  • Size

    1.2MB

  • MD5

    3ab2e1b1a049332e4bddae2c5aa8343c

  • SHA1

    5b9e17e7f710afb5a6783dca1dd13632c69b7a73

  • SHA256

    406da366c83b1dd4f5449762da1bfe66d3aa5a29ddd1e40d954779b06de413bb

  • SHA512

    20aae71b6e49965adc627c167a802477f5db82837faa90c84469be1be485825dc7e83264ea8769eb835a18df7b4a5240dded2475a541e10854e4aae62c3bbe1a

  • SSDEEP

    24576:PH2qHAu1q/lk09Km+afhDJhyOsnTk1o+Mqkln4CD9UBsN:/2mv1E9HBaOsngoPj9UBsN

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 3ab2e1b1a049332e4bddae2c5aa8343c_JaffaCakes118
    .rar
  • 天天壁纸秀.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/Monolith.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5bfc20ed54c751dcd49af1de9ae70042


    Headers

    Imports

    Exports

    Sections

  • Player.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • UpdateFileFile.xml
  • UpdateFileLocal.xml
    .xml
  • Updater.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cximagecrtu.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url