General

  • Target

    49fb0b09ede15057d5d9976f708dc7e5_JaffaCakes118

  • Size

    1.7MB

  • MD5

    49fb0b09ede15057d5d9976f708dc7e5

  • SHA1

    ba0f6ecf32a8d28ceb60fcba6e71fc67671c123b

  • SHA256

    bdc10f5277b0149dbf7bced195a8737ddf119c0aa0333ecfd8467495a8cacbb0

  • SHA512

    d71419233a312e0b79622476b7a9d98d0fe8602b3f97807bc6064d2b71ce951e2178a2a70bfe70eec9ae72e3bb6c26a02ad2c643d3d19fbfece95d1739d2a878

  • SSDEEP

    49152:ElJy8JwdRFr9dCYE93RDKJ3mSawCD671s9pSZt:ElJy8JpnKwQCeC9Mt

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 49fb0b09ede15057d5d9976f708dc7e5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    46444be09c7bd9854fac64f896f7f0be


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ext.dll
    .dll windows:4 windows x86 arch:x86

    1c2d42a4e533f3c86f1f4597355c880c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/lastpage.ini
  • $PLUGINSDIR/update.ini
  • $TEMP/pin.vbs
    .vbs
  • $_8_.exe
    .exe windows:4 windows x86 arch:x86

    46444be09c7bd9854fac64f896f7f0be


    Headers

    Imports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • MFC71ENU.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • database.dat
    .zip
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    5267e141ef53b6bc9facced1f8907002


    Headers

    Imports

    Sections