General

  • Target

    401fc1ea831d384f8b6027b86a45f86a_JaffaCakes118

  • Size

    4.5MB

  • MD5

    401fc1ea831d384f8b6027b86a45f86a

  • SHA1

    1f601d1eee3171451b013160ba5b9b2e2564f21a

  • SHA256

    b239c9c92f5c032eafddbe34e9c3c8ed068831ba9d735a5c5cc1ea237d97324c

  • SHA512

    7709cff55d835c22d1055d6d00af55cedc3070f0890461378d0a639f0f6d151dd2e5caaa13846e50ff7b818cbca9f56dd58aba8e19978c5593a55aece0afda88

  • SSDEEP

    98304:TwNVWmtFrxz5UlLKIRS40DJOVJs+R1tHX+aytcNppnWjlTe6XUuiXSYhtrtL6:TwTWsZ5wWUs+vBMtcpnKlTdiXSYhf+

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 401fc1ea831d384f8b6027b86a45f86a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e993db4f819ff0a3121bf9c6b6c636cd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioRequirements.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/$R0
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/spltmp.bmp