General

  • Target

    49e867d988b4868307df4fbc19ed9e2c_JaffaCakes118

  • Size

    7.9MB

  • MD5

    49e867d988b4868307df4fbc19ed9e2c

  • SHA1

    0e44dcd91f73476c0896bc6ebcf2265c73a26a0a

  • SHA256

    3376b5627787af7802df19cd899e02a6f0f0d7f814ca80193a7e748e4ad37aea

  • SHA512

    102716b7cf15e497a5d9ec34a63f64675fda1e2b31a1c4e96ed90e07aecfd54acd427eaa3f64b663572a7a2c71b3b7ee169eae42b3d973103a86b57127904e5e

  • SSDEEP

    196608:0fTdXwV2L4jWlhgP73l3x5CPTCMNMnRC9tm4PqhbhSDFSHHeJOhD:eTdgJKcJh5C+Nn0tmq5SHHeJU

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 63 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 49e867d988b4868307df4fbc19ed9e2c_JaffaCakes118
    .rar
  • AVIsetup-v1.01.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Delay.dll
    .dll windows:4 windows x86 arch:x86

    bb13ae3bcb238d1bf689a931b2a56cd6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    295fc8c35dee88b924b0f6bafc807c6c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/io3.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/avisynth.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $SYSDIR/avsplugin/ds.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/devil.dll
    .dll windows:4 windows x86 arch:x86

    539dc2de9957ed66b1a3e23a9e595fd9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/ds.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $SYSDIR/etherh264.dll
    .dll windows:4 windows x86 arch:x86

    67134e545652ed6bb28c7690063dcc3e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pthreadGC2.dll
    .dll windows:4 windows x86 arch:x86

    4ed4b97c004af0f3c95aeb69c247d60b


    Headers

    Imports

    Exports

    Sections

  • AVI.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • ColorFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    979e0f84feee8bd249cecc46473e5ef2


    Headers

    Imports

    Exports

    Sections

  • HtmlView.fne
    .dll windows:4 windows x86 arch:x86

    7cf927755417252449a422e31928491b


    Headers

    Imports

    Exports

    Sections

  • MoviePlayer.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ec32bf7c116effb11e6c21ca64047f4b


    Headers

    Imports

    Exports

    Sections

  • RealMediaSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    092c362fafa1e9277558c0e5612fdfba


    Headers

    Imports

    Exports

    Sections

  • SkinMagic.dll
    .dll windows:4 windows x86 arch:x86

    17c01c37c9a203f4e480989938af599f


    Headers

    Imports

    Exports

    Sections

  • Up.Ini
  • asfsplliter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    61540ae4d5f1fe29babe6b430f77a241


    Headers

    Imports

    Exports

    Sections

  • atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • atrc3260.dll
    .dll windows:4 windows x86 arch:x86

    6586f6b67922619ef0bd5f2a8e0679d6


    Headers

    Imports

    Exports

    Sections

  • cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • cook3260.dll
    .dll windows:4 windows x86 arch:x86

    b6a8e24f32ad566499f8cb1ca7dd463c


    Headers

    Imports

    Exports

    Sections

  • devil.dll
    .dll windows:4 windows x86 arch:x86

    539dc2de9957ed66b1a3e23a9e595fd9


    Headers

    Imports

    Exports

    Sections

  • downlib.fne
    .dll windows:4 windows x86 arch:x86

    5b7b89cf97e6c9cb92a256b4dc3df833


    Headers

    Imports

    Exports

    Sections

  • drv1.dll
    .dll windows:4 windows x86 arch:x86

    232d11e71e9db2c13e39696149eba4f6


    Headers

    Imports

    Exports

    Sections

  • drv2.dll
    .dll windows:4 windows x86 arch:x86

    44586b56c5dcc55b19268bed59258786


    Headers

    Imports

    Exports

    Sections

  • drv23260.dll
    .dll windows:4 windows x86 arch:x86

    956ed08b4825cd8ff0c2b3fe8ba05ef3


    Headers

    Imports

    Exports

    Sections

  • drv33260.dll
    .dll windows:4 windows x86 arch:x86

    600d6f7c1cea6736e951ab7ecfe9da08


    Headers

    Imports

    Exports

    Sections

  • drv43260.dll
    .dll windows:4 windows x86 arch:x86

    e31d4509c91ceccd53040baa2421daf4


    Headers

    Imports

    Exports

    Sections

  • drvc.com
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • drvc.dll
    .dll windows:4 windows x86 arch:x86

    84e2a36831124a7e045d9aced4753ff3


    Headers

    Imports

    Exports

    Sections

  • ds.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • eCompress.fne
    .dll windows:4 windows x86 arch:x86

    8ff650a0e5dac613c5ee06a64bb8862b


    Headers

    Imports

    Exports

    Sections

  • ether.dll
    .dll windows:4 windows x86 arch:x86

    74fc5bc0ccbd06050b4bf237e858cd6f


    Headers

    Imports

    Exports

    Sections

  • etheraac.dll
    .dll windows:4 windows x86 arch:x86

    55e8afd7b436bd26c0b5ecea6bb9112a


    Headers

    Imports

    Exports

    Sections

  • etheraad.dll
    .dll windows:4 windows x86 arch:x86

    f3416510778e0ed24c0a63ebcddf420e


    Headers

    Imports

    Exports

    Sections

  • etheravs.exe
    .exe windows:4 windows x86 arch:x86

    f8c4dd6701597351802bdda218fd46d4


    Headers

    Imports

    Sections

  • internet.fne
    .dll windows:4 windows x86 arch:x86

    a0ac47f87c51f127efa0e1a85fead828


    Headers

    Imports

    Exports

    Sections

  • ir41_32.dll
    .dll windows:4 windows x86 arch:x86

    85a9e6f6597b940150b4fee5dc44adc8


    Headers

    Imports

    Exports

    Sections

  • ir50_32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a27070539407160f6a16064876e70fed


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    1021c4a553644f3ae1cb67958917960d


    Headers

    Imports

    Exports

    Sections

  • libmp3lame-0.dll
    .dll windows:4 windows x86 arch:x86

    964d7a9742ef4649521cb051fa6fedd4


    Headers

    Imports

    Exports

    Sections

  • option.ini
  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • pthreadGC2.dll
    .dll windows:4 windows x86 arch:x86

    4ed4b97c004af0f3c95aeb69c247d60b


    Headers

    Imports

    Exports

    Sections

  • raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • rv10.dll
    .dll windows:4 windows x86 arch:x86

    7d0bbca4dd169c4c1a33b2513aa5069d


    Headers

    Imports

    Exports

    Sections

  • rv20.dll
    .dll windows:4 windows x86 arch:x86

    de93a6d25a8e8a4317757a0f9e71593a


    Headers

    Imports

    Exports

    Sections

  • rv30.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • rv40.dll
    .dll windows:4 windows x86 arch:x86

    a5049b84d47d09c19faafd0e69f94d06


    Headers

    Imports

    Exports

    Sections

  • shell.fne
    .dll windows:4 windows x86 arch:x86

    7bfe20f314273547fb9502c64706871e


    Headers

    Imports

    Exports

    Sections

  • sipr.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • sipr3260.dll
    .dll windows:4 windows x86 arch:x86

    c1935d65f94ed1568e2ba5a5eb73a065


    Headers

    Imports

    Exports

    Sections

  • tokr3260.dll
    .dll windows:4 windows x86 arch:x86

    4f44386571fd04bba8c0455dac3b4f1a


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • updata.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • vp31vfw.dll
    .dll windows:4 windows x86 arch:x86

    a65f36f19ed14ae42fdaa8e54d9a2f60


    Headers

    Imports

    Exports

    Sections

  • vp4vfw.dll
    .dll windows:4 windows x86 arch:x86

    eed26f4119de70a17af6f8a629cad6f5


    Headers

    Imports

    Exports

    Sections

  • vp5vfw.dll
    .dll windows:4 windows x86 arch:x86

    8edef9f10754ad74957a27babedc515a


    Headers

    Imports

    Exports

    Sections

  • vp6vfw.dll
    .dll windows:4 windows x86 arch:x86

    97aa522788300906eb52ef16439356ec


    Headers

    Imports

    Exports

    Sections

  • wmv9dmod.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    d09b0e99e2ed49fce63e4a163a6fd9c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wmvadvd.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    662ce3cb5997e3da010c6243bfe9312c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xvidcore.dll
    .dll windows:4 windows x86 arch:x86

    64a887ac6543ea563d71739a0a786b8f


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url