General

  • Target

    3d1e9fb8c0d03fb2e8a0cb0172a9542e_JaffaCakes118

  • Size

    4.9MB

  • MD5

    3d1e9fb8c0d03fb2e8a0cb0172a9542e

  • SHA1

    536314a324f632c030a468f0cf7fa9e436c0a651

  • SHA256

    e848d2efff9c0385066996cc704f13373f34c1b09051b6676cc971e49c916189

  • SHA512

    bb4b9007546b3634a60735ae83adb8532e2df75f301e44ad5e37870cc973e2e818cbd584b270c6d0b27cb4d7946b66cc5e20fdc3492f5b1f95986289a3902c7d

  • SSDEEP

    98304:9mAYKx3y6zLnhHyLBfK4bZO1wTwxwASI9pcklU3S81J3QQ2vo5nNbvAYj6hv7:9EKx3yEL41MrfSbkwx1tQQ2vSNDAYjyD

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 3 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 3d1e9fb8c0d03fb2e8a0cb0172a9542e_JaffaCakes118
    .rar
  • setupezezhun.exe
    .exe windows:4 windows x86 arch:x86

    55f3dfd13c0557d3e32bcbc604441dd3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Flash9d.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    3e8f2b182b3d3a5a8713624244dfecbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FlashUtil9d.exe
    .exe windows:4 windows x86 arch:x86

    a9d79d340821ec352051fcf0138d0a55


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ReliCheck.dll
    .dll windows:4 windows x86 arch:x86

    035afc44296f8c16215520592831dc24


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/swflash.inf
  • $WINDIR/System32/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • ReliAgent.exe
    .exe windows:4 windows x86 arch:x86

    39cff7de5831f5294c78520ea6189558


    Headers

    Imports

    Sections

  • ReliCheck.dll
    .dll windows:4 windows x86 arch:x86

    035afc44296f8c16215520592831dc24


    Headers

    Imports

    Exports

    Sections

  • Reli_Lite.exe
    .exe windows:4 windows x86 arch:x86

    ac6eccc8cfa7cc290cbab05529c60217


    Headers

    Imports

    Exports

    Sections

  • Uninst.exe.nsis
  • dll/ARMP.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • dll/ARMPD.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • dll/Language/CA.ini
  • dll/Language/CHTW.ini
  • dll/Language/CHU.ini
  • dll/Language/DE.ini
  • dll/Language/EN.ini
  • dll/Language/ES.ini
  • dll/Live.dll
    .dll windows:4 windows x86 arch:x86

    8e14386292fada7325ccee50112ec529


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/MMCShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9083f667d650d1af21134089b65ffa3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/MngModule.dll
    .dll windows:4 windows x86 arch:x86

    a3a833654b8c2bc9b10713f675b50a7d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/PP/ERoc.dll
    .dll windows:4 windows x86 arch:x86

    e43bbcb8f87ee846306b634ce05db32f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/PP/KOM.dll
    .dll windows:4 windows x86 arch:x86

    6903731fae21a3a4d1993323396b9b1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/PP/MIR.dll
    .dll windows:4 windows x86 arch:x86

    f8c4a4bb769de40d3b381996f6a7acef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/PP/TEN.dll
    .dll windows:4 windows x86 arch:x86

    69630f4e49cba917c47d520250bf1ff5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/PP/tpi.dll
    .dll windows:4 windows x86 arch:x86

    90547e4eb5ec31263ac362ca3152bc21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/PPLive.exe
    .exe windows:4 windows x86 arch:x86

    617c768fd238d02f91b5d732bfac68f5


    Code Sign

    Headers

    Imports

    Sections

  • dll/PSNetwork.dll
    .dll windows:4 windows x86 arch:x86

    9df42075d1961df48275e7885b07e77b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/PowerPlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bac002bf332151a4156013a7592fdbc7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/SynacastEWA.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    58f19f0799b04806b0e2151bf3df12fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/TvantsX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    6875d19c3a33d2551ac60203561b8a1a


    Headers

    Imports

    Exports

    Sections

  • dll/common.dll
    .dll windows:4 windows x86 arch:x86

    4af413a6eee4fec07c0985b05516f3f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/in_psp.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • dll/out_mmshttp.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • dll/p2pmmp/gp2core.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c9f40d2cf9e8ff4405c48b7b04431330


    Headers

    Imports

    Exports

    Sections

  • dll/p2pmmp/mmp.inf
  • dll/p2pmmp/mmsserver.dll
    .dll windows:4 windows x86 arch:x86

    32e0d7e732794bbb54385e36574cf509


    Headers

    Imports

    Exports

    Sections

  • dll/p2pmmp/p2pmanager.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d0b2d83a5a8583bb3bc491368a2cbf4b


    Headers

    Imports

    Exports

    Sections

  • dll/vodnet.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6f579e3c6fba5c86c554a1948b8f6c9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/vodrc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3789329c090fb362f9d4d75bb096fa5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/vodres.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    02fd941a2b4dc2f6cded673210dab266


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • extern/RealCodecs/RealMediaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    f79bf9ac2177d3d25eeed41ffd8b9782


    Headers

    Imports

    Exports

    Sections

  • extern/RealCodecs/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • extern/RealCodecs/drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url