General

  • Target

    4dc0874266cd4dad128e1e766c5796ea_JaffaCakes118

  • Size

    11.8MB

  • MD5

    4dc0874266cd4dad128e1e766c5796ea

  • SHA1

    910acc9f8e2fce8e13cc4da85436da1111ef2adf

  • SHA256

    5ce9e6d1e11c658631f427b384d27dc366dea29dd4f33d2c874bea7cb78273f9

  • SHA512

    4d497e96c54347d770ee83a60a34c6d04d6601885d2cf55c8035fd39720b4d59c92fa18181ed4c851d39c906b287d114d89ceb994b271e7a0863306326872c6b

  • SSDEEP

    196608:GWR5SC9f9G7MXt77bfEPgtZh38P4OM8CsE3Ly76ShtouYDBaHwH5eYUMhAHIOo4L:z53YM9XbcYDhe7MYEI/+hPaHIWlSS9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 5 IoCs

    Detects file using ACProtect software.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 4dc0874266cd4dad128e1e766c5796ea_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/mpipod.exe
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/winbdux.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6ed0ef1241434004fefc6b3838f4914a


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/winshipbar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    22705131a9ae1fce3aa1bf191d96322e


    Headers

    Imports

    Exports

    Sections

  • ATOMChanger.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • AtomAVCPSP.ini
  • AtomMP4PSP.ini
  • Images/0300.png
    .png
  • Images/0301.png
    .png
  • Images/0500.png
    .png
  • Images/1000.png
    .png
  • MediaConverter.exe
    .exe windows:4 windows x86 arch:x86

    f571693386bca65aac15d4241e38aebd


    Headers

    Imports

    Exports

    Sections

  • avidump.exe
    .exe windows:4 windows x86 arch:x86

    602e2383d1cf85bf02c6bde89a3b9091


    Headers

    Imports

    Sections

  • batch/mp4-avc-psp.bat
    .bat .vbs
  • batch/mp4-avc.bat
    .bat .vbs
  • batch/mp4-psp.bat
    .bat .vbs
  • batch/mp4.bat
    .bat .vbs
  • batch/pmp-avc-aac.bat
    .bat .vbs
  • batch/pmp-avc-mp3.bat
    .bat .vbs
  • codecs/atrc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • codecs/drvc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • codecs/pncrt.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • codecs/sipr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • codecs/vp6vfw.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codecs/vp7vfw.dll
    .dll windows:4 windows x86 arch:x86

    2db58069391b37a70e1d0410a28e2a7b


    Headers

    Imports

    Exports

    Sections

  • help.txt
  • language/chinese.ini
  • mencoder.exe
    .exe windows:4 windows x86 arch:x86

    91e22ffded393fb7db2d1975ca914913


    Headers

    Imports

    Sections

  • mp4creator.exe
    .exe windows:4 windows x86 arch:x86

    0f0e2a71f650173670d0a3e930c87ee8


    Headers

    Imports

    Sections

  • mplayer.exe
    .exe windows:4 windows x86 arch:x86

    460d88dc6bcf0347636e86088ee9bf8f


    Headers

    Imports

    Sections

  • pmp_muxer.exe
    .exe windows:4 windows x86 arch:x86

    3201205a56a30111410d37d9c12832b7


    Headers

    Imports

    Sections

  • pmp_muxer_avc.exe
    .exe windows:4 windows x86 arch:x86

    72e83b6147f903a4d3b86226ed5ee96a


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1dba24346e415c53ffa8a8a260a9f47e


    Headers

    Imports

    Sections